joomla/session

The package is licensed, documented, tested in the repository, and has a security policy. Organization backing and a recent push help, but the limited recent activity and CI image pinning merit care.

Latest 4.0.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package has existed since 2013 with 29 releases, but it has had no registry release in the last 12 months, which weakens evidence of ongoing release maintenance.

Repo bus factor

One contributor made all commits in the last three months, concentrating recent maintenance in a single person; organization ownership provides some capacity but no active second contributor is shown.

Repo commit activity

Only one commit was recorded in the last three months, indicating thin recent development activity despite the recent repository push.

Repo tooling

Composer build tooling is used, but no security-scanning tool was detected, leaving a modest verification gap.

Workflow audit

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all 10 action references are unpinned and two high-confidence unpinned-image findings reduce CI reproducibility.

Vulnerabilities

Title	Versions	Severity
CVE-2015-8566 joomla/session is vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in versions 0.0.0 - 1.3.1.	0.0.0 - 1.3.1	High