sonarsoftware/customer_portal_framework
The README explains installation and required permissions, and Composer is used without install-time scripts. The repository is not archived, but the missing security policy and absent security scanning reduce transparency for a library handling customer data.
43%
Total Score
67
83
83
Health Score Breakdown
The manifest declares MIT, but the artifact license file is detected as Apache-2.0. The package is licensed, but the mismatch creates avoidable legal and transparency uncertainty.
The package has 18 releases, but its latest release was in July 2020 and it had no releases in the last 12 months. That long release gap is a substantial abandonment concern despite a previously regular cadence.
There were zero commits and zero active maintainers in the last 3 months. Combined with the old registry release, this indicates weak current maintenance capacity.
There were no new or closed issues or pull requests in the last month, and two pull requests remain open. This suggests limited recent project movement.
Composer build tooling is present, but no security scanning tools are configured. For a customer-portal library, that is a meaningful repository hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Simon Westlake |
| Devin Johnson |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version 1.* | — | — |
vlucas/phpdotenv Version * | — | — |
guzzlehttp/guzzle Version 6.* | — | — |
inacho/php-credit-card-validator Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.