ether/logs

Access logs from the CP

Latest 4.0.1

Packagist

58%

Total Score

caution

Usable with caveats: no release or commit activity for about two years suggests maintenance may have stalled.

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package has nine releases since December 2017, but its latest release was May 9, 2024, with none in the last 12 months; this indicates a long maintenance gap.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, a concrete sign that ongoing maintenance has stalled.

Repo issue activity

There were no new or closed issues or pull requests in the last month, with five open issues remaining; this reinforces the maintenance concern.

Repo tooling

The repository uses Composer, but no security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.

Security policy

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2024-10117 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. ether/logs is vulnerable to Cross-Site Scripting (XSS) in versions 3.0.0 - 4.0.0.	3.0.0 - 4.0.0	High
CVE-2022-23409 ether/logs is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 3.0.4.	0.0.0 - 3.0.4	Medium
CVE-2021-32752 ether/logs is vulnerable to Files or Directories Accessible to External Parties in versions 0.0.0 - 3.0.4.	0.0.0 - 3.0.4	High