Full glossary
Glossary · End of life
End of life (EOL): when a language stops getting fixes
What a version's end of life means, and why no package scanner tells you about it.
Updated · 3-minute read
In one sentence
End of life is the date after which a version of a language or framework no longer receives any security fix.
Why it's a risk
The next vulnerability found in that version will never be officially fixed. The project stays exposed, even if its packages are up to date.
A recent example
PHP 8.1, end of life since December 31, 2025, got no official fixed release for PHP2Shell in October 2026.
And LibWatch?
LibWatch reads the language version declared by each project and shows its end-of-life date in the dependency list, flagged 90 days ahead.