Customizable welcome banner for Flarum
58%
Total Score
caution
Usable with caveats: the only release is over four years old and maintenance has gone quiet.
A single registry maintainer creates a thin publishing base. The linked repository is clearly owned by the same individual, so this is a modest capacity concern rather than evidence of abandonment by itself.
This is the package's only release, published over four years ago, with no releases in the last 12 months. The stable version and non-deprecated status provide some compensation, but the lack of release activity raises maintenance and compatibility concerns.
The repository recorded no commits or active maintainers in the last three months, and its last push was nearly three years ago. This is direct evidence that maintenance has gone quiet.
The repository uses Composer for builds, but no security-scanning tools were detected. The missing scanning is a hygiene gap, though it is less significant for this small package than the stale maintenance activity.
No repository security policy was detected. This limits the project's disclosure transparency, but it is a secondary concern for a small extension and does not outweigh the maintenance evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.