Watch your users catch as many fishes as they can
62%
Total Score
50
100
88
75
A single registry maintainer leaves limited visible publishing capacity. This is a modest concern for continuity, although the linked repository identifies the same individual as its owner.
The registry namespace and repository owner match, and the repository is owned by the individual maintainer rather than an organization. This supports package identity but provides limited organizational continuity.
The package has 11 releases over about 7 years, but none in the last 12 months and the latest was June 2023. This is a meaningful maintenance concern, though the earlier release cadence shows the project was previously maintained.
There were no commits and no active maintainers in the last 3 months, consistent with the latest repository push and release being in 2023. This materially increases abandonment risk.
There were no new or closed issues in the last month and one open pull request, providing no evidence of current maintenance activity. This reinforces the release and commit inactivity concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.