Advanced Project Status

Generated on 2026-06-19 02:17:56 in 1065 seconds by apstats

Lines of code

LanguageBytesFilesLinesBlanksCommentsCode (SLOC)
All files without dependencies    
See detail per file type...
87 471 2904 1061 744 120196 462351 4751 196 183
All files of dependencies only    
See detail per file type...
70 530 5633 384827 88672 520164 888590 478
Total158 001 8537 4902 572 006268 982516 3631 786 661

Contributions

Pushes and Commits of Dolibarr/dolibarr Pull Request Size of Dolibarr/dolibarr

Contributors


Thumbs of most active contributors

Dolibarr


Star History of Dolibarr/dolibarr

Project value

COCOMO value
(Basic/Semi-detached model)
$137 424 898
COCOMO effort
(Basic/Semi-detached model)
12 118 months people

Last security issues (last 6 months)

Commit IDDateReported on a
VDP (GHSA, Yogosha...)
Reported on
GitHub issues
Reported on
CVE
TitleBranch of fix
2126f231…2026-04-30SEC: Advisory for bbbbb56c6455514dcd0acca53afc17a92ed21bb9 - Better sanitization param for GETPOST of htmlheader of website page23.0, develop
bc249547… 2026-04-23#ghsa-8qh8-6h88-q46p#37973Fix fatal error on customreports, regression #GHSA-8qh8-6h88-q46p (#37973), FIX #GHSA-8qh8-6h88-q46p23.0, develop
17265d86… 2026-04-20#ghsa-hq5j-39f9-qxcv#37812FIX #GHSA-hq5j-39f9-qxcv (#37812), FIX #GHSA-hq5j-39f9-qxcv, FIX #GHSA-hq5j-39f9-qxcv18.0, 19.0, 20.0, 21.0, 22.0, 23.0, develop
ad9328ec… 2026-04-09#ghsa-crgg-h74r-2m8r#37636FIX #GHSA-crgg-h74r-2m8r (#37636), FIX #GHSA-crgg-h74r-2m8r (#37637), FIX #GHSA-crgg-h74r-2m8r18.0, 19.0, 20.0, 21.0, 22.0, 23.0, develop
9533677c…2026-04-03#ghsa-prg3-w5r4-h7g3FIX #GHSA-prg3-w5r4-h7g323.0, develop
ee8ded7c…2026-03-29#ghsa-5cfw-655w-vqp8Fix #GHSA-5cfw-655w-vqp823.0, develop
7113794c…2026-03-29#ghsa-7mvq-p95c-38fxFix #GHSA-7mvq-p95c-38fx23.0, develop
e263a85f…2026-03-26#ghsa-ph29-326p-chw4FIX #GHSA-ph29-326p-chw4 - disable+sanitize deprecated load/save files23.0, develop
fb251fee… 2026-03-26#ghsa-39vm-9q4p-6jjg#37629FIX #GHSA-39vm-9q4p-6jjg - force disabling module possible on demo only (#37629), FIX #GHSA-39vm-9q4p-6jjg - force disabling module possible on demo only22.0, 23.0, develop
1f1b6bf4… 2026-03-26#ghsa-hh5p-m24x-fwx2#37630FIX #GHSA-hh5p-m24x-fwx2 block ssrf when using webhooks (#37630), FIX #GHSA-hh5p-m24x-fwx2 block ssrf when using webhooks22.0, 23.0, develop
c83c1330… 2026-03-26#ghsa-v5fq-cf5m-vwv7#37632FIX #GHSA-v5fq-cf5m-vwv7 - Credit Grzegorz Tworek, Sec4check (#37632), FIX #GHSA-v5fq-cf5m-vwv7 - Credit Grzegorz Tworek, Sec4check (grzegorz.tworek@sec4check.pl)22.0, 23.0, develop
11244390… 2026-03-26#ghsa-qjj8-wpvx-p54jFIX #GHSA-qjj8-wpvx-p54j - test on hierarchy not done on some api23.0, develop
18aa4442… 2026-03-26#ghsa-5jmx-352f-p5g3NEW use of rich editor is off by default on public page - #GHSA-5jmx-352f-p5g3, NEW Start implementation of MAIN_RESTRICTHTML_ONLY_VALID_HTML=2 for #GHSA-5jmx-352f-p5g3develop
67e35e3f…2026-03-26#ghsa-jc53-p98m-66wvFix #GHSA-jc53-p98m-66wv - SSRF better on servers with ipv6 onlydevelop
6d68a68b…2026-03-26#ghsa-5w4f-94xq-w36fFix #GHSA-5w4f-94xq-w36f - wrapper to download files in public ticket is too opendevelop
f98e60bd… 2026-03-25#ghsa-7hqv-pvw6-cw54FIX #GHSA-7hqv-pvw6-cw5423.0, develop
ea1d3605…2026-03-25#ghsa-3g6r-h9mx-5gg9FIX #GHSA-3g6r-h9mx-5gg9develop
6f425521…2026-03-25#ghsa-vmvw-qq8w-wqhgFIx #GHSA-vmvw-qq8w-wqhg23.0, develop
29c63752…2026-03-25#ghsa-mh66-3w5r-xg9jFix #GHSA-mh66-3w5r-xg9j23.0, develop
8ab83f3b…2026-03-25#ghsa-3j3p-jjf7-hm9gBackport fix #GHSA-3j3p-jjf7-hm9g22.0, 23.0, develop
d928b816…2026-03-02#ghsa-q29x-7fmx-7gq3Fix #GHSA-q29x-7fmx-7gq323.0, develop
743c22e5…2026-03-02#ghsa-2mfj-r695-5h9rSec: Fix #GHSA-2mfj-r695-5h9r23.0, develop
a8e05083…2026-02-12#37211Sec: Can init a page with php content without permission for php content (#37211)18.0, 19.0, 20.0, 21.0, 22.0, 23.0, develop
5846921e…2026-02-11Sec: Can init a page with php content without permission for php content edition (reported by phdwg1410)22.0, 23.0, develop
2e7ab21d… 2026-01-13#ghsa-w5j3-8fcr-h87w#36868FIX #GHSA-w5j3-8fcr-h87w (#36868), FIX #GHSA-w5j3-8fcr-h87w18.0, 19.0, 20.0, 21.0, 22.0, 23.0, develop
4bfda08f…2026-01-07#ghsa-px39-mwcr-hvxpFix #GHSA-px39-mwcr-hvxp23.0, develop

Note:Search is done in git repository on regex string "#ghsa|#yogosha|CVE[\s\-]*\d|Sec:|Sec |^Sec\s" (not case sensitive)
You can use this URL for RSS notifications: index-security.rss

Technical debt (PHPStan - PHP Static Analysis Tool 1.12.33 - level 9 -> 187 warnings)

FileLineType
htdocs/blockedlog/admin/blockedlog.php356Variable $hmac_encoded_secret_key might not be defined.
htdocs/blockedlog/admin/blockedlog.php369Variable $hmac_encoded_secret_key might not be defined.
htdocs/blockedlog/admin/blockedlog_archives.php621Variable $amountstoshow might not be defined.
htdocs/blockedlog/admin/blockedlog_archives.php621Variable $s might not be defined.
htdocs/blockedlog/admin/blockedlog_archives.php661Variable $amountstoshow might not be defined.
htdocs/blockedlog/admin/blockedlog_archives.php661Variable $s might not be defined.
htdocs/blockedlog/admin/blockedlog_archives.php1291Variable $footer might not be defined.
htdocs/blockedlog/admin/blockedlog_list.php278Parameter #1 $string of function urlencode expects string, array given.
htdocs/blockedlog/admin/blockedlog_list.php894Variable $s might not be defined.
htdocs/comm/action/index.php1829Parameter #16 $usergroupid of function print_actions_filter expects array|int, string given.
htdocs/core/actions_setmoduleoptions.inc.php121Variable $tmpdir might not be defined.
htdocs/core/ajax/price.php66Variable $tva_tx in isset() always exists and is not nullable.
htdocs/core/class/CMailFile.class.php1448Variable $result might not be defined.
htdocs/core/class/commoninvoice.class.php1999Variable $stripearrayofkeys might not be defined.
htdocs/core/class/commoninvoice.class.php2006Variable $stripearrayofkeys might not be defined.
htdocs/core/class/commoninvoice.class.php2039Variable $stripearrayofkeys might not be defined.
htdocs/core/class/commonobject.class.php5622Parameter #2 $line of method CommonObject::printObjectLine() expects CommonObjectLine, CommonObject|stdClass given.
htdocs/core/class/commonobject.class.php5828Parameter #1 $line of method CommonObject::printOriginLine() expects CommonObjectLine, CommonObject|stdClass given.
htdocs/core/class/conf.class.php124Property Conf::$modules_parts type has no value type specified in iterable type array.
htdocs/core/class/hookmanager.class.php63Property HookManager::$hooks has no type specified.

Technical debt (Phan 5.5.2 -> 503 warnings)

FileLineDetail
htdocs/blockedlog/admin/blockedlog_archives.php621UndefError PhanPossiblyUndeclaredGlobalVariable Global variable $amountstoshow is possibly undeclared
htdocs/blockedlog/admin/blockedlog_archives.php621UndefError PhanPossiblyUndeclaredGlobalVariable Global variable $s is possibly undeclared
htdocs/blockedlog/admin/blockedlog_archives.php654TypeError PhanTypeInvalidDimOffset Invalid offset $source of $totalamountlifetime['BILL_VALIDATE'] of array type array{}
htdocs/blockedlog/admin/blockedlog_archives.php654TypeError PhanTypeInvalidDimOffset Invalid offset $source of $totalhtamountlifetime['BILL_VALIDATE'] of array type array{}
htdocs/blockedlog/admin/blockedlog_archives.php657TypeError PhanTypeInvalidDimOffset Invalid offset $source of $totalamountlifetime['PAYMENT_CUSTOMER_CREATE'] of array type array{}
htdocs/blockedlog/admin/blockedlog_archives.php657TypeError PhanTypeInvalidDimOffset Invalid offset $source of $totalamountlifetime['PAYMENT_CUSTOMER_DELETE'] of array type array{}
htdocs/blockedlog/admin/blockedlog_archives.php661UndefError PhanPossiblyUndeclaredGlobalVariable Global variable $amountstoshow is possibly undeclared
htdocs/blockedlog/admin/blockedlog_archives.php661UndefError PhanPossiblyUndeclaredGlobalVariable Global variable $s is possibly undeclared
htdocs/blockedlog/admin/blockedlog_archives.php1291UndefError PhanPossiblyUndeclaredGlobalVariable Global variable $footer is possibly undeclared
htdocs/blockedlog/admin/blockedlog_archives.php1291TypeError PhanTypeMismatchArgumentNullable Argument 1 ($stringtodecode) is $footer of type ?''|?string but \dol_htmlcleanlastbr() takes string defined at htdocs/core/lib/functions.lib.php:9914 (expected type to be non-nullable)
htdocs/blockedlog/admin/blockedlog_list.php894UndefError PhanPossiblyUndeclaredGlobalVariable Global variable $s is possibly undeclared
htdocs/blockedlog/admin/blockedlog_list.php894TypeError PhanTypeMismatchArgumentNullable Argument 1 ($text) is $s of type ?string but \Form::textwithpicto() takes string defined at htdocs/core/class/html.form.class.php:817 (expected type to be non-nullable)
htdocs/blockedlog/admin/blockedlog_list.php1026TypeError PhanTypeInvalidDimOffset Invalid offset $source of $totalamountlifetime['BILL_VALIDATE'] of array type array{}
htdocs/blockedlog/admin/blockedlog_list.php1026TypeError PhanTypeInvalidDimOffset Invalid offset $source of $totalhtamountlifetime['BILL_VALIDATE'] of array type array{}
htdocs/blockedlog/admin/blockedlog_list.php1081TypeError PhanTypeInvalidDimOffset Invalid offset $source of $totalamountlifetime['PAYMENT_CUSTOMER_CREATE'] of array type array{}
htdocs/blockedlog/admin/blockedlog_list.php1081TypeError PhanTypeInvalidDimOffset Invalid offset $source of $totalamountlifetime['PAYMENT_CUSTOMER_DELETE'] of array type array{}
htdocs/comm/action/index.php1473TypeError PhanTypeMismatchProperty Assigning ($userId as a field) of type array to property but \ActionComm->userassigned is array
htdocs/comm/action/pertype.php1054TypeError PhanTypeExpectedObjectPropAccess Expected an object instance when accessing an instance property, but saw an expression $username with type string
htdocs/comm/action/pertype.php1324TypeError PhanTypeExpectedObjectPropAccess Expected an object instance when accessing an instance property, but saw an expression $username with type string
htdocs/comm/action/pertype.php1326TypeError PhanTypeExpectedObjectPropAccess Expected an object instance when accessing an instance property, but saw an expression $username with type string