phpMussel upload handler
68%
Total Score
caution
Usable with caveats: all recent commits come from one contributor and all workflow actions are unpinned.
The package has existed since June 2020 with 22 releases and a latest release on November 21, 2025. Only one release in the last 12 months suggests a slower cadence, but not abandonment by itself.
One contributor made all two commits during the last three months. Organization ownership provides some handoff capacity, but current activity remains concentrated.
The repository recorded two commits in the last three months, showing recent activity but a modest maintenance pace. This is partly offset by the recent release and push.
Composer is used for builds, but no repository security-scanning tool was detected. This is a transparency and maintenance gap rather than evidence of unsafe code.
Both workflows were analyzed without audit findings, unsafe-trigger sinks, or top-level write permissions. However, all four action references are unpinned, leaving workflow dependencies exposed to upstream changes.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phpmussel/core Version ^3.5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.