# End of life (EOL): when a language stops getting fixes

Source: https://libwatch.com/en/glossary/end-of-life

Glossary · End of life

What a version's end of life means, and why no package scanner tells you about it.

Updated October 22, 2026 · 3-minute read

In one sentence

End of life is the date after which a version of a language or framework no longer receives any security fix.

## Why it's a risk

The next vulnerability found in that version will never be officially fixed. The project stays exposed, even if its packages are up to date.

## A recent example

PHP 8.1, end of life since December 31, 2025, got no official fixed release for [PHP2Shell](/en/cve/php2shell) in October 2026.

## And LibWatch?

LibWatch reads the language version declared by each project and shows [its end-of-life date](/en/features/end-of-life) in the dependency list, flagged 90 days ahead.

## See also

- Glossary
### [SCA](/en/glossary/sca)

Composition analysis.

- Glossary
### [CERT-FR](/en/glossary/cert-fr)

Alerts from ANSSI.

- Glossary
### [SBOM](/en/glossary/sbom)

The software bill of materials.

## Which language version do your projects declare?

[Check my versions](https://app.libwatch.com/users/sign_up?source=glossary_eol)