ph7software/ph7cms
Self-hosted PHP platform for building white-label dating sites, matchmaking communities, and social networks
78%
Total Score
healthy
Active and established, but concentrated maintenance and workflow hygiene keep this release below the top tier.
Health Score Breakdown
The artifact includes license files and the package declares MIT, but the detected files also include CC-BY-SA-4.0, which does not cleanly match the declaration. The release is licensed, but the mixed license evidence deserves clarification.
post-install-cmd and post-update-cmd scripts run during dependency operations, adding execution-time supply-chain exposure. This is a caution for deployments even though such scripts can be normal in PHP applications.
Two contributors are active, but one accounts for about 85% of recent commits. The second contributor provides some continuity, while the concentration remains a maintenance risk.
All six workflows were analyzed with no injection findings or audit failures, and one workflow uses top-level write permissions. However, all 13 analyzed action references are unpinned, which weakens build reproducibility and action supply-chain protection.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Pierre-Henry Soria |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twilio/sdk Version ^8.0 | — | — |
geoip2/geoip2 Version ^3.3 | — | — |
ph-7/datatype Version ^1.0 | — | — |
fakerphp/faker Version ^1.24 | — | — |
symfony/mailer Version ^7.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.