hov/jobfair

Simple job market based on Extbase and Fluid. Basically works like dmmjobcontrol. There are list and detail views available. In addition, it is possible to set up an online application system. Furthermore, FE-Users can be enabled to add and edit jobs in the frontend, so to BE-Administration is required. Feeds (Rss091, Rss2, Atom) are also available

Latest v6.0.1

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Lifecycle scripts

A pre-autoload-dump install-time lifecycle script runs during Composer operations. The signal does not show harmful behavior, but any install-time execution adds supply-chain exposure compared with a package without lifecycle scripts.

Project backing

The repository is owned by an individual user rather than an organization, so the concentrated recent maintenance activity is not offset by visible organizational backing.

Release history

There were no releases in the last 12 months, despite 16 releases over roughly 4 years and 10-day median intervals. This indicates a meaningful slowdown for a package whose latest release is over a year old.

Repo bus factor

All 3-month commit activity came from one contributor, giving the current maintenance effort a single-person bus factor and increasing continuity risk.

Repo commit activity

The repository recorded only 1 commit in the last 3 months, showing limited recent maintenance activity even though it was updated recently.

Vulnerabilities

Title	Versions	Severity
CVE-2021-43564 hov/jobfair is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.0.0 - 1.0.13 and 2.0.0 - 2.0.2.	0.0.0 - 1.0.132.0.0 - 2.0.2	High

Package versions

Maintainers

Daniel Schill

Nikita Hovratov

Direct Dependencies

Dependency	Last Release	Score
typo3/cms-core Version ^13.4	—	—
typo3/cms-fluid Version ^13.4	—	—
typo3/cms-backend Version ^13.4	—	—
typo3/cms-extbase Version ^13.4	—	—
typo3/cms-frontend Version ^13.4	—	—