A web-based erp, accounting system that written in PHP and MySql
64%
Total Score
63
100
89
100
The repository is owned by a user account rather than an organization, so the highly concentrated contributor activity represents a genuine continuity concern.
Recent activity is highly concentrated: one contributor made 578 of 579 commits, so continuity depends heavily on a single person despite a second active contributor.
Only one issue and one pull request are open, but there was no new or closed issue or pull-request activity in the last month; this is a mild process signal, offset by strong commit activity.
Composer is used for builds, but no security-scanning tool was detected. This is a modest transparency and assurance gap rather than evidence of abandonment.
The registry marks 1.0.0 as a stable major release, but its release notes explicitly describe this build as alpha, unstable, incomplete, and intended for testing.
| Title | Versions | Severity |
|---|---|---|
CVE-2023-24788 notrinos/notrinos-erp is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 0.7. | 0.0.0 - 0.7 | High |
CVE-2022-2927 notrinos/notrinos-erp is vulnerable to Weak Password Requirements in versions 0.0.0 - 0.7. | 0.0.0 - 0.7 | High |
CVE-2022-2921 notrinos/notrinos-erp is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor in versions 0.0.0 - 0.7. | 0.0.0 - 0.7 | High |
CVE-2022-2871 notrinos/notrinos-erp is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 0.7. | 0.0.0 - 0.7 | Medium |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.