Package Health

php-mod/curl

cURL class for PHP

Latest 2.5.0PackagistPackagist

43%

Total Score

unhealthy

Risky to adopt: registry abandonment and a long gap since the last release outweigh the repository's good structure.

Are you affected? Scan for Free

Health Score Breakdown

Registry deprecationdanger

The registry marks the package as abandoned at package scope, which is a substantial adoption risk even though the listed replacement is the same package.

Release historydanger

The package has 31 historical releases but none in the last 12 months, and version 2.5.0 was released on 14 December 2022; this indicates a prolonged release gap.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which weakens the otherwise recent repository-push evidence and raises maintenance risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap rather than evidence of unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted execution paths, but all four action references are unpinned, leaving avoidable build-integrity exposure.

Vulnerabilities

TitleVersionsSeverity
CVE-2021-30134
php-mod/curl is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 2.3.2.
0.0.0 - 2.3.2
Medium

Package versions

Maintainers

php-curl-class
Hassan Amouhzi
user52

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
3 years ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform