webklex/php-imap

The project has had no commits or releases in the measured recent period, while 123 issues remain open and no security policy is published. It is otherwise well-documented, tested, licensed, and not archived.

Latest 6.2.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the lack of releases in the last year, this is the strongest abandonment warning in the assessment.

Dependency profile

The release declares 11 runtime dependencies, including several PHP extensions and framework components. This is a moderate integration surface, but not by itself evidence of poor package health.

Release history

The package has 60 releases since August 2018, but none in the last 12 months; the latest release was in April 2025. This indicates a meaningful maintenance slowdown for a library dependency.

Repo issue activity

The repository has 123 open issues and 21 open pull requests, with no issues closed or pull requests merged in the measured month. This supports concern about responsiveness and backlog management.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. That is a hygiene gap, though the available evidence does not show an unsafe build.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2025-10031 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. webklex/php-imap is vulnerable to Authentication Bypass by Spoofing in versions 1.4.2 - 6.0.0.	1.4.2 - 6.0.0	High
CVE-2023-35169 webklex/php-imap is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 5.3.0.	0.0.0 - 5.3.0	Critical