october/backend

The MIT license, clear source match, and small runtime dependency set support adoption. Missing security tooling and policy leave transparency weaker.

Latest v1.1.12

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package has 169 releases since 2016, but none in the last 12 months and the latest release was in March 2022. That long silence is a meaningful abandonment concern.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, consistent with the last push in March 2022 and increasing abandonment risk.

Repo tooling

Composer is used for builds, but no security scanning tools are present. That is a transparency and maintenance weakness, though not severe enough to make the release unfit alone.

Repository archived

The repository is not archived, but it was last pushed in March 2022. Its unarchived status provides some continuity evidence without offsetting the prolonged inactivity.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Vulnerabilities

Title	Versions	Severity
CVE-2021-21265 october/backend is vulnerable to Improper Neutralization of HTTP Headers for Scripting Syntax in versions 0.0.0 - 1.1.2.	0.0.0 - 1.1.2	Low
CVE-2020-15248 october/backend is vulnerable to Improper Privilege Management in versions 1.0.319 - 1.0.470.	1.0.319 - 1.0.470	Medium
CVE-2020-15249 october/backend is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 1.0.319 - 1.0.469.	1.0.319 - 1.0.469	Low
CVE-2020-11083 october/backend is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 1.0.319 - 1.0.466.	1.0.319 - 1.0.466	Low
CVE-2020-4061 october/backend is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 1.0.319 - 1.0.467.	1.0.319 - 1.0.467	Low