rudloff/alltube

Unfit to use: the package is deprecated and its source repository is archived. It has a solid history, documentation, tests, and licensing, but there has been no release or commit activity since April 2023.

Latest 3.2.0-alpha

Packagist

15%

Total Score

Maintainer Stability

Maturity

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk regardless of its earlier release history.

Release history

The package has 57 releases over more than 11 years, but it has had no release in over three years. The long history is outweighed by the prolonged current inactivity.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the archived status and indicating no ongoing maintenance capacity.

Repository archived

The linked repository is archived and was last pushed on April 22, 2023, indicating that active maintenance has ended.

Version stability

This release is a prerelease (3.2.0-alpha), adding adoption risk on top of the package-wide abandonment and archived repository.

Vulnerabilities

Title	Versions	Severity
CVE-2022-24739 rudloff/alltube is vulnerable to URL Redirection to Untrusted Site ('Open Redirect') in versions 0.0.0 - 3.0.3.	0.0.0 - 3.0.3	High
CVE-2022-0768 rudloff/alltube is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 3.0.2.	0.0.0 - 3.0.2	Critical
CVE-2022-0692 rudloff/alltube is vulnerable to URL Redirection to Untrusted Site ('Open Redirect') in versions 0.0.0 - 3.0.1.	0.0.0 - 3.0.1	Medium

Package versions

Maintainers

Pierre Rudloff

Olivier Haquette

Direct Dependencies

Dependency	Last Release	Score
aura/session Version ^2.1	—	—
symfony/yaml Version ^4.0	—	—
yt-dlp/yt-dlp Version ^2023.03	—	—
symfony/finder Version ^5.4	—	—
rinvex/countries Version ^7.3	—	—