yetiforce/yetiforce-crm

An open and innovative CRM system. Our team created for you one of the most innovative CRM systems that supports mainly business processes and allows for customization according to your needs. Be ahead of your competition and implement YetiForce!

Latest 6.5.0

Packagist

15%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement package given. Package-level deprecation is a severe adoption concern.

Release history

The package has existed since February 2017 with 19 releases, but it has had no registry release in the last 12 months. The long gap is evidence of stalled maintenance.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. This confirms that current maintenance activity has stopped.

Repository archived

The linked GitHub repository is archived, and its last push was in September 2024. An archived source repository is a severe abandonment risk for a package intended to be depended on.

Dependency profile

The release declares 57 runtime dependencies, including many PHP extensions and application libraries. This is substantial integration and maintenance surface for a CRM, but it is consistent with the package's broad application scope.

Vulnerabilities

Title	Versions	Severity
CVE-2023-49508 yetiforce/yetiforce-crm is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 6.5.0.	0.0.0 - 6.5.0	Medium
CVE-2022-3002 yetiforce/yetiforce-crm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 6.4.0.	0.0.0 - 6.4.0	Medium
CVE-2022-3005 yetiforce/yetiforce-crm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 6.4.0.	0.0.0 - 6.4.0	Medium
CVE-2022-2924 yetiforce/yetiforce-crm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 6.4.0.	0.0.0 - 6.4.0	Medium
CVE-2022-3004 yetiforce/yetiforce-crm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 6.4.0.	0.0.0 - 6.4.0	Medium

Package versions

Maintainers

YetiForceCompany

Direct Dependencies

Dependency	Last Release	Score
sabre/dav Version ^4.1	—	—
twig/twig Version ^3.0	—	—
adhocore/jwt Version ^1.0	—	—
milon/barcode Version ^9.0.0	—	—
setasign/fpdf Version 1.8.*	—	—