munkireport/comment
Module for munkireport.
58%
Total Score
75
88
75
Health Score Breakdown
The package has nine releases since November 2018, but none in the last 12 months; its latest release was over three years ago. This is meaningful maintenance risk despite a previously regular release interval.
There were no commits and no active maintainers in the last three months, reinforcing the release-history evidence of stalled maintenance.
Composer is used for the build, which is appropriate for a Packagist package, but no security scanning tools were detected. This is a modest transparency and maintenance gap.
The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2020-15885 munkireport/comment is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 4.0. | 0.0.0 - 4.0 | Medium |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 erusev/parsedown Version ^1.7 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.