afrux/top-posters-widget
It has a clear MIT license, tests, release notes, and a matching source repository. The single unpinned workflow action and absent security policy leave modest transparency and build-hygiene gaps.
64%
Total Score
75
90
50
Health Score Breakdown
The package has six releases since August 2021, but none in the last 12 months; the latest release was over a year ago. This indicates slowed maintenance without proving abandonment.
The repository recorded no commits and no active maintainers in the last three months. The repository is not archived and was pushed with the latest release, which partly offsets the concern.
The linked repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented. This is a transparency gap, not evidence that the package is unsafe.
The only analyzed workflow uses one unpinned action, while the audit found no dangerous triggers, sinks, or high-confidence findings. This is a limited build-hygiene concern rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sami Mazouz |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 flarum/core Version ^1.2.0 | — | — |
afrux/forum-widgets-core Version ^0.1.7 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.