Package Health/uvdesk/community-skeleton

uvdesk/community-skeleton

Usable with caveats: it is a mature, well-backed package with clear documentation, licensing, and release notes, but maintenance has slowed substantially. No commits were recorded in the last three months, and only one release appeared in the last year, while the repository has no automated security scanning.

Latest v1.1.8

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Release history

The project has existed for about 6 years 11 months with 26 releases, but only one release occurred in the last 12 months, indicating a slower current cadence.

Repo commit activity

No commits or active maintainers were recorded during the last three months, a significant maintenance concern for a full helpdesk application.

Repo issue activity

The repository still has 73 open issues and 7 open pull requests, but only one new issue and no merged pull requests were recorded in the last month, suggesting limited recent response activity.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving an avoidable gap in ongoing supply-chain and vulnerability hygiene.

Vulnerabilities

Title	Versions	Severity
CVE-2023-0265 uvdesk/community-skeleton is vulnerable to Unrestricted Upload of File with Dangerous Type in versions 0.0.0 - 1.1.1.	0.0.0 - 1.1.1	High
CVE-2023-0325 uvdesk/community-skeleton is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.1.1.	0.0.0 - 1.1.1	Medium
CVE-2023-1197 uvdesk/community-skeleton is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.1.0.	0.0.0 - 1.1.0	Medium