UVDesk Community Helpdesk Core Framework Bundle
62%
Total Score
caution
Usable with caveats: no releases in the last 12 months and no commits in the last 3 months.
The artifact declares MIT and includes license files, but the repository license was detected as OSL-3.0. This license mismatch should be clarified before adoption.
The package has 26 releases over roughly 7 years, but there were no releases in the last 12 months. That points to slowing maintenance despite a previously regular release cadence.
There were no commits and no active maintainers in the last 3 months. This is a meaningful maintenance warning, although the recent repository push and existing release history provide some counterweight.
The repository has 57 open issues, but only one new issue and no closed issues in the last month. The backlog and lack of recent resolution indicate limited visible responsiveness.
Composer is used for builds, but no security scanning tools were detected. The missing automated security tooling is a modest transparency and maintenance gap.
| Title | Versions | Severity |
|---|---|---|
CVE-2024-3137 uvdesk/core-framework is vulnerable to Improper Privilege Management in versions 0.0.0 - 1.1.1. | 0.0.0 - 1.1.1 | High |
| Dependency | Last Release | Score |
|---|---|---|
doctrine/doctrine-bundle Version ^2.4 | — | — |
knplabs/knp-paginator-bundle Version ^5.4.0 | — | — |
doctrine/doctrine-fixtures-bundle Version ^3.4 | — | — |
doctrine/doctrine-migrations-bundle Version ^3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.