Package Health

reportico-web/reportico

Reportico Open Source PHP Report Designer

Latest 8.1.0PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Are you affected? Scan for Free

Health Score Breakdown

Release historydanger

The package has 75 releases and a mature history, but its latest release was over three years ago and there were no releases in the last 12 months, indicating substantial abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and materially weakening confidence in ongoing maintenance.

Repo issue activitycaution

There were 33 open issues and no new or closed issues or pull requests in the last month, suggesting that project activity and issue handling have stalled.

Repo toolingcaution

Composer is used for the build, providing basic project tooling, but no security scanning tools were detected, leaving a modest maintenance-hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled, especially for a package with no recent maintenance activity.

Vulnerabilities

TitleVersionsSeverity
CVE-2024-31556
reportico-web/reportico is vulnerable to Improper Privilege Management in versions 0.0.0 - 8.1.0.
0.0.0 - 8.1.0
Medium
CVE-2023-48865
reportico-web/reportico is vulnerable to Authorization Bypass Through User-Controlled Key in versions 0.0.0 - 8.1.0.
0.0.0 - 8.1.0
Medium
CVE-2023-47438
reportico-web/reportico is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 8.1.0.
0.0.0 - 8.1.0
Medium
CVE-2023-46925
reportico-web/reportico is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 7.1.21.
0.0.0 - 7.1.21
Medium

Package versions

Maintainers

Reportico

Direct Dependencies

DependencyLast ReleaseScore
twig/twig
Version ^3.0
—
—
szymach/c-pchart
Version ^3.0
—
—
tecnickcom/tcpdf
Version ^6.2
—
—
reportico/assetter
Version ^8.1
—
—
spatie/browsershot
Version ^3.29
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform