npmpackage.info

Gathering detailed insights and metrics for snyk-php-plugin

Other packages similar to snyk-php-plugin

snyk-nuget-plugin

2.7.13

Snyk CLI NuGet plugin

@snyk/snyk-cocoapods-plugin

2.6.0

Snyk CLI CocoaPods plugin

snyk-go-plugin

1.23.0

Snyk CLI Golang plugin

snyk-mvn-plugin

3.6.1

Snyk CLI Maven plugin

Gathering detailed insights and metrics for snyk-php-plugin

snyk-php-plugin

Basic Snyk CLI plugin for PHP support

1.10.0

Apache-2.0

TypeScript

49,770,129 4.1

Installations

npm install snyk-php-plugin

Pull Requests

Open

0

Total

66

Closed

4

Merged

62

Issues

Open

1

Total

2

Closed

1

Releases

v1.10.0

Published on 15 Oct 2024

v1.9.4

Published on 14 Oct 2022

v1.9.3

Published on 14 Jun 2021

v1.9.2

Published on 08 Sept 2020

v1.9.1

Published on 07 Aug 2020

v1.9.0

Published on 29 Apr 2020

View all 27 releases

Developer

snyk

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

>=8

Typescript Support

Yes

Node Version

20.18.0

NPM Version

10.8.2 Statistics

6 Stars

136 Commits

6 Forks

106 Watching

10 Branches

36 Contributors

Updated on 29 Oct 2024

Languages

TypeScript (100%)

Total Downloads

Cumulative downloads

Total Downloads

49,770,129

Last day

10.4%

6,042

Compared to previous day

Last week

-3.3%

36,128

Compared to previous week

Last month

57%

123,592

Compared to previous month

Last year

-45.3%

1,611,390

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@snyk/cli-interface @snyk/composer-lockfile-parser @snyk/dep-graph tslib

Dev Dependencies

@types/node @typescript-eslint/eslint-plugin @typescript-eslint/parser eslint sync-request tap typescript

Versions

Snyk helps you find, fix and monitor for known vulnerabilities in your dependencies, both on an ad hoc basis and as part of your CI (Build) system.

:information_source: This repository is only a plugin to be used with the Snyk CLI tool. To use this plugin to test and fix vulnerabilities in your project, install the Snyk CLI tool first. Head over to snyk.io to get started.

Snyk PHP CLI Plugin

The plugin provides dependency metadata for PHP Composer projects that manifest dependencies in composer.json and composer.lock files.

Stable Version

The latest stable version of the package.

Stable Version

1.10.0

HIGH

7.5/10

Summary

OS Command Injection in Snyk php plugin

Affected Versions

< 1.10.0

Patched Versions

1.10.0

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

9

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

5

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

58 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-25mq-v84q-4j7r
Warn: Project is vulnerable to: GHSA-cwmx-hcrq-mhc3
Warn: Project is vulnerable to: GHSA-f2wf-25xc-69c9
Warn: Project is vulnerable to: GHSA-q559-8m2m-g699
Warn: Project is vulnerable to: GHSA-w248-ffj2-4v5q
Warn: Project is vulnerable to: GHSA-pgwj-prpq-jpc2
Warn: Project is vulnerable to: GHSA-8wgj-6wx8-h5hq
Warn: Project is vulnerable to: GHSA-mrqx-rp3w-jpjp
Warn: Project is vulnerable to: GHSA-r2rq-3h56-fqm4
Warn: Project is vulnerable to: GHSA-x92h-wmg2-6hp7
Warn: Project is vulnerable to: GHSA-xhh6-956q-4q69
Warn: Project is vulnerable to: GHSA-h7vf-5wrv-9fhv
Warn: Project is vulnerable to: GHSA-q8hg-pf8v-cxrv
Warn: Project is vulnerable to: GHSA-557v-xcg6-rm5m
Warn: Project is vulnerable to: GHSA-pw5c-xqf2-6xc2
Warn: Project is vulnerable to: GHSA-q7rv-6hp3-vh96 / GHSA-wxmh-65f7-jcvw
Warn: Project is vulnerable to: GHSA-22pv-7v9j-hqxp
Warn: Project is vulnerable to: GHSA-3gv2-29qc-v67m
Warn: Project is vulnerable to: GHSA-5c58-w9xc-qcj9
Warn: Project is vulnerable to: GHSA-cr49-fx2v-9p57
Warn: Project is vulnerable to: GHSA-g3rh-rrhp-jhh9
Warn: Project is vulnerable to: GHSA-g97c-jfx6-xvxh
Warn: Project is vulnerable to: GHSA-h7v2-2qwg-h829
Warn: Project is vulnerable to: GHSA-j5jh-hpr4-h332
Warn: Project is vulnerable to: GHSA-jjx5-fq5g-8xpc
Warn: Project is vulnerable to: GHSA-p684-f7fh-jv2j
Warn: Project is vulnerable to: GHSA-q847-2q57-wmr3
Warn: Project is vulnerable to: GHSA-q8j7-fjh7-25v5
Warn: Project is vulnerable to: GHSA-qq5c-677p-737q
Warn: Project is vulnerable to: GHSA-v35g-4rrw-h4fw
Warn: Project is vulnerable to: GHSA-v77v-x634-9m56
Warn: Project is vulnerable to: GHSA-wfv7-5x33-v22h
Warn: Project is vulnerable to: GHSA-whgv-8cg3-7hcm
Warn: Project is vulnerable to: GHSA-wvjv-p5rr-mmqm
Warn: Project is vulnerable to: GHSA-52m2-vc4m-jj33
Warn: Project is vulnerable to: GHSA-6377-hfv9-hqf6
Warn: Project is vulnerable to: GHSA-6j75-5wfj-gh66
Warn: Project is vulnerable to: GHSA-jjxq-ff2g-95vh
Warn: Project is vulnerable to: GHSA-vxrc-68xx-x48g
Warn: Project is vulnerable to: GHSA-442f-wcwq-fpcf
Warn: Project is vulnerable to: GHSA-74qv-rv53-5wcx
Warn: Project is vulnerable to: GHSA-mw2w-2hj2-fg8q
Warn: Project is vulnerable to: GHSA-2fhr-8r8r-qp56
Warn: Project is vulnerable to: GHSA-5957-5crx-79jx
Warn: Project is vulnerable to: GHSA-62f6-h68r-3jpw
Warn: Project is vulnerable to: GHSA-8q77-cv62-jj38
Warn: Project is vulnerable to: GHSA-f6rc-rh43-h8gr
Warn: Project is vulnerable to: GHSA-fh7r-58q4-6387
Warn: Project is vulnerable to: GHSA-gff2-p6vm-3p8g
Warn: Project is vulnerable to: GHSA-jq87-2wxp-8349
Warn: Project is vulnerable to: GHSA-pm9m-w23q-5967
Warn: Project is vulnerable to: GHSA-qc7w-4567-84wv
Warn: Project is vulnerable to: GHSA-qh9w-r7g5-q939
Warn: Project is vulnerable to: GHSA-v59p-p692-v382
Warn: Project is vulnerable to: GHSA-x2f4-8wxf-w3vf
Warn: Project is vulnerable to: GHSA-xg9w-r469-m455
Warn: Project is vulnerable to: GHSA-xp8p-9rq5-4wgv
Warn: Project is vulnerable to: GHSA-xx8f-qf9f-5fgw

Score

4.1

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More