Evidence tier Source Confirmed · 9 captures on record
What the publisher says
As described on Microsoft Marketplace.
Papoo CMS is a free and open-source content management system (CMS) used for creating and managing websites, portals, blogs, and web applications with an easy-to-use administration interface.
Key Features of Papoo CMS:
Show the rest of the publisher’s description (15 more lines)
- User-friendly web-based administration panel.
- Supports unlimited pages, articles, and menu structures.
- Multilingual website management support.
- SEO-friendly speaking URLs and automatic sitemap generation.
- Integrated media management, newsletters, and RSS feeds.
- Flexible user rights and group permission management.
- Supports plugins, templates, and social media integration.
Papoo CMS Usage:
$ sudo su
$ cd /opt/papoo
$ php -v
$ ls
$ grep -i "version" /opt/papoo/lib/version.php
Disclaimer:
Papoo CMS is an independent open-source content management system developed and maintained by its contributors. It is distributed under open-source licensing terms. Users should review the official documentation, server requirements, and security recommendations before deploying Papoo CMS in a production environment.
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment · as of 2026-08-29
Sources
Publisher resources
1 linkLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.