Package Health

phpmussel/frontend

Clear documentation, release notes, and a clean workflow audit improve adoption confidence. Organization backing helps offset one-person commit concentration, but all four actions are unpinned and no security scanning is reported.

Latest v3.8.0PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factorcaution

One contributor made 100% of the 10 recent commits. The organization-owned repository provides some handoff capacity, but the observed maintenance activity remains highly concentrated.

Repo commit activitycaution

The repository recorded 10 commits in the last three months, showing current maintenance. However, all of those commits came from one active maintainer, which limits visible redundancy.

Repo toolingcaution

Composer is used for builds, which supports reproducible package management, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Workflow auditcaution

Both workflows were analyzed without failed files, injection sinks, dangerous triggers, or audit findings. All four action references are unpinned, which leaves dependency versions floating and is a minor supply-chain hygiene concern.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10546 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
phpmussel/frontend is vulnerable to Path Traversal in versions 3.0.0 - 3.6.2.
3.0.0 - 3.6.2
Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
phpmussel/core
Version ^3.7
maikuolan/common
Version ^2.16

Weekly Downloads

Info

Last Published
24 days ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform