intelliants/subrion

The package has a clear GPL license, matching source repository, readable documentation, and release notes. Its maintenance has effectively stopped, with no registry release for over eight years and no commits in the last three months; the repository also lacks a security policy.

Latest v4.2.1

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Release history

The latest registry release was over eight years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a package developers would depend on.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old registry release, this materially raises abandonment risk.

Repo issue activity

There are 185 open issues but no new or closed issues and no pull requests in the last month. This suggests an unattended backlog and weak current project activity.

Repo tooling

Composer is used for builds, providing basic project tooling, but no security scanning tools are configured. The missing scanning is a hygiene concern rather than proof that the release is unsafe.

Security policy

The repository has no security policy. For a PHP web application, this weakens the process for reporting and handling vulnerabilities.

Vulnerabilities

Title	Versions	Severity
CVE-2026-12202 intelliants/subrion is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 4.0.3.	0.0.0 - 4.0.3	Low
CVE-2025-70958 intelliants/subrion is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 4.2.1.	0.0.0 - 4.2.1	Medium
CVE-2025-56556 intelliants/subrion is vulnerable to Authorization Bypass Through User-Controlled SQL Primary Key in versions 0.0.0 - 4.2.1.	0.0.0 - 4.2.1	Medium
CVE-2024-25399 intelliants/subrion is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 4.2.1.	0.0.0 - 4.2.1	Medium
CVE-2024-25400 intelliants/subrion is vulnerable to Security Vulnerability in versions 0.0.0 - 4.2.1.	0.0.0 - 4.2.1	Critical