verbb/formie

The most user-friendly forms plugin for Craft.

Latest 4.0.0-beta.17

Packagist

80%

Total Score

healthy

Active project with frequent releases and five contributors, but this beta relies heavily on one contributor.

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factor

Although 5 contributors were active, one contributor made about 97% of the 165 recent commits, leaving substantial operational dependence on that person.

Repo tooling

Composer is used for builds, but no repository security-scanning tool was detected. This is a modest transparency and defense-in-depth gap, not evidence of unsafe code.

Version stability

Version 4.0.0-beta.17 is a prerelease, so its API and behavior may still change; the recent prerelease share of 15% suggests this is not the package's general pattern.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-240740 New verbb/formie is vulnerable to Missing Authorization in versions 0.0.1 - 3.1.43.	0.0.1 - 3.1.43	Medium
AIKIDO-2026-772441 New verbb/formie is vulnerable to Missing Authorization in versions 0.0.1 - 3.1.43.	0.0.1 - 3.1.43	Medium
AIKIDO-2026-244440 New verbb/formie is vulnerable to Missing Authorization in versions 0.0.1 - 3.1.43.	0.0.1 - 3.1.43	Medium
AIKIDO-2026-571714 New verbb/formie is vulnerable to Insecure Direct Object Reference (IDOR) in versions 0.0.1 - 3.1.43.	0.0.1 - 3.1.43	Medium
AIKIDO-2026-600533 New verbb/formie is vulnerable to Missing Authentication in versions 0.0.1 - 3.1.43.	0.0.1 - 3.1.43	Medium

Package versions

Maintainers

Verbb

Direct Dependencies

Dependency	Last Release	Score
verbb/auth Version ^2.0.48	—	—
verbb/base Version ^3.0.20	—	—
craftcms/cms Version ^5.0.0	—	—
verbb/tiptap Version ^1.0.1	—	—
dompdf/dompdf Version ^1.0.2 \|\| ^2.0.3 \|\| ^3.0	—	—