rainlab/blog-plugin
The project includes tests, a clear README, an MIT license, and only one runtime dependency. Its workflow audit is complete, though both action references are unpinned and no security policy is present.
86%
Total Score
100
100
94
75
Health Score Breakdown
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap, not evidence of abandonment.
The repository has no security policy. This weakens vulnerability-reporting transparency, though it is not by itself evidence that the release is unsafe to depend on.
The single workflow was fully analyzed with no untrusted checkout, script-injection, or audit findings, and it avoids top-level write permissions. Both of its action references are unpinned, a minor reproducibility and integrity gap.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2018-7198 rainlab/blog-plugin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.4.1. | 0.0.0 - 1.4.1 | Medium |
Package versions
Maintainers
 Alexey Bobkov |
| Samuel Georges |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.