Package Health/solspace/craft-express-forms

solspace/craft-express-forms

Intuitive and lightweight form builder.

Latest 2.0.3

Packagist

18%

Total Score

critical

Unfit to use: the package is deprecated and its source repository is archived.

Are you affected? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned and names solspace/craft-freeform as its replacement. This is a direct warning against taking a new dependency on this package.

Release history

The package has a substantial history of 27 releases, but its latest release was on February 13, 2024 and it had no releases in the last 12 months. The history shows prior maturity but not current maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the archived state, this strongly supports abandonment risk.

Repository archived

The linked repository is archived, which indicates the project is no longer being maintained for ongoing development. Its last push was on May 16, 2024.

Lifecycle scripts

Composer post-install and post-update scripts expand the install-time execution surface. No further evidence is provided to show that these scripts are unsafe, so this is a limited supply-chain hygiene concern.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10658 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. solspace/craft-express-forms is vulnerable to Cross-site Scripting (XSS) in versions 2.0.0 - 2.0.2.	2.0.0 - 2.0.2	High

Package versions

Maintainers

Solspace

Direct Dependencies

Dependency	Last Release	Score
craftcms/cms Version ^4.0.0	—	—
symfony/yaml Version ^3.0\|^4.0\|^5.0\|^6.0	—	—
nesbot/carbon Version ^1.22.1\|^2.19	—	—
symfony/finder Version ^2.8\|^3.0\|^4.0\|^5.0\|^6.0	—	—
solspace/craft3-commons Version ^1.0.19	—	—