Package Health

notrinos/notrinos-erp

A web-based erp, accounting system that written in PHP and MySql

Latest 1.0.0PackagistPackagist

64%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Are you affected? Scan for Free

Health Score Breakdown

Project backingcaution

The repository is owned by a user account rather than an organization, so the highly concentrated contributor activity represents a genuine continuity concern.

Repo bus factorcaution

Recent activity is highly concentrated: one contributor made 578 of 579 commits, so continuity depends heavily on a single person despite a second active contributor.

Repo issue activitycaution

Only one issue and one pull request are open, but there was no new or closed issue or pull-request activity in the last month; this is a mild process signal, offset by strong commit activity.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. This is a modest transparency and assurance gap rather than evidence of abandonment.

Version stabilitycaution

The registry marks 1.0.0 as a stable major release, but its release notes explicitly describe this build as alpha, unstable, incomplete, and intended for testing.

Vulnerabilities

TitleVersionsSeverity
CVE-2023-24788
notrinos/notrinos-erp is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 0.7.
0.0.0 - 0.7
High
CVE-2022-2927
notrinos/notrinos-erp is vulnerable to Weak Password Requirements in versions 0.0.0 - 0.7.
0.0.0 - 0.7
High
CVE-2022-2921
notrinos/notrinos-erp is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor in versions 0.0.0 - 0.7.
0.0.0 - 0.7
High
CVE-2022-2871
notrinos/notrinos-erp is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 0.7.
0.0.0 - 0.7
Medium

Package versions

Maintainers

Tran Anh Phuong

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
4 months ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform