yungifez/skuul

A multi school management system.

Latest V2.6.4

Packagist

68%

Total Score

caution

Usable with caveats: no releases in the last 12 months despite a maintained, non-archived repository.

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package has 85 releases since November 2022, but none in the last 12 months. That points to slower release maintenance, although recent repository activity provides some compensation.

Repo commit activity

The repository recorded 2 commits in the last 3 months from 2 active maintainers. Activity is limited but has not collapsed to a single contributor.

Workflow audit

Both workflows were analyzed without high-confidence findings or untrusted checkouts, and one scopes permissions at job level. However, all 8 action references are unpinned, leaving avoidable build-integrity risk.

Vulnerabilities

Title	Versions	Severity
CVE-2025-13784 yungifez/skuul is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 2.6.5.	0.0.0 - 2.6.5	Low
CVE-2025-13785 yungifez/skuul is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.0.0 - 2.6.4.	0.0.0 - 2.6.4	Medium
CVE-2025-12918 yungifez/skuul is vulnerable to Improper Control of Resource Identifiers ('Resource Injection') in versions 0.0.0 - 2.6.4.	0.0.0 - 2.6.4	Low

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
brick/money Version ^0.8.0	—	—
nnjeim/world Version ^1.1	—	—
doctrine/dbal Version ^3.5	—	—
laravel/tinker Version ^2.8	—	—
laravel/prompts Version ^0.1.6	—	—