Package Health

uvdesk/core-framework

UVDesk Community Helpdesk Core Framework Bundle

Latest v1.1.7PackagistPackagist

62%

Total Score

caution

Usable with caveats: no releases in the last 12 months and no commits in the last 3 months.

Are you affected? Scan for Free

Health Score Breakdown

Licensecaution

The artifact declares MIT and includes license files, but the repository license was detected as OSL-3.0. This license mismatch should be clarified before adoption.

Release historycaution

The package has 26 releases over roughly 7 years, but there were no releases in the last 12 months. That points to slowing maintenance despite a previously regular release cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. This is a meaningful maintenance warning, although the recent repository push and existing release history provide some counterweight.

Repo issue activitycaution

The repository has 57 open issues, but only one new issue and no closed issues in the last month. The backlog and lack of recent resolution indicate limited visible responsiveness.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. The missing automated security tooling is a modest transparency and maintenance gap.

Vulnerabilities

TitleVersionsSeverity
CVE-2024-3137
uvdesk/core-framework is vulnerable to Improper Privilege Management in versions 0.0.0 - 1.1.1.
0.0.0 - 1.1.1
High

Package versions

Maintainers

UVdesk Support

Direct Dependencies

DependencyLast ReleaseScore
doctrine/doctrine-bundle
Version ^2.4
—
—
knplabs/knp-paginator-bundle
Version ^5.4.0
—
—
doctrine/doctrine-fixtures-bundle
Version ^3.4
—
—
doctrine/doctrine-migrations-bundle
Version ^3.4
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform