cURL class for PHP
43%
Total Score
unhealthy
Risky to adopt: registry abandonment and a long gap since the last release outweigh the repository's good structure.
The registry marks the package as abandoned at package scope, which is a substantial adoption risk even though the listed replacement is the same package.
The package has 31 historical releases but none in the last 12 months, and version 2.5.0 was released on 14 December 2022; this indicates a prolonged release gap.
There were no commits and no active maintainers in the last three months, which weakens the otherwise recent repository-push evidence and raises maintenance risk.
The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap rather than evidence of unsafe code.
The single workflow was fully analyzed with no audit findings or untrusted execution paths, but all four action references are unpinned, leaving avoidable build-integrity exposure.
| Title | Versions | Severity |
|---|---|---|
CVE-2021-30134 php-mod/curl is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 2.3.2. | 0.0.0 - 2.3.2 | Medium |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.