pimcore/data-hub

Documentation, tests, and release notes support a well-run project. The organization has a broad active contributor base and security processes, while workflow references are not pinned and need tightening.

Latest v2026.2.8

Packagist

87%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

100

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All 13 workflows were analyzed successfully, with no untrusted checkouts or script injection; however, all 21 action references are unpinned and two workflows grant top-level write permissions. The only audit finding is low-confidence cache-poisoning, so it is hygiene rather than a severe risk.

Vulnerabilities

Title	Versions	Severity
CVE-2022-0955 pimcore/data-hub is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.2.4.	0.0.0 - 1.2.4	Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
nesbot/carbon Version ^2.72 \|\| ^3.8.4	—	—
pimcore/pimcore Version ^2026.1	—	—
webonyx/graphql-php Version ^15.2.3	—	—
pimcore/studio-ui-bundle Version ^2026.2.5	—	—
pimcore/studio-backend-bundle Version ^2026.1	—	—