Package Health/movingbytes/social-network

movingbytes/social-network

The package includes an MIT license, a README, tests, and release notes for this version. Its published release history and source activity are years old, while the registry and repository both indicate it is no longer maintained.

Latest v1.2.1

Packagist

12%

Total Score

Maintainer Stability

Maturity

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning against taking a new dependency on it.

Release history

The latest release was in April 2016, with only four releases overall and none in the last 12 months. This strongly indicates abandonment for a web application package.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, providing no evidence of ongoing maintenance.

Repository archived

The linked repository is archived, despite a last push in March 2022, so it is no longer an actively maintained source for this package.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while ten pull requests remain open. This is consistent with an inactive project.

Vulnerabilities

Title	Versions	Severity
CVE-2017-7390 movingbytes/social-network is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.2.1.	0.0.0 - 1.2.1	Medium

Package versions

Maintainers

Andreas Beder

Direct Dependencies

Dependency	Last Release	Score
textalk/websocket Version ^1.2	—	—
phpmailer/phpmailer Version ^5.2	—	—
league/oauth2-client Version ^1.3	—	—
league/oauth2-google Version ^1.0	—	—
altorouter/altorouter Version ^1.1	—	—