The MIT license, matching repository, and minimal dependency footprint make the small package easy to inspect. However, no release or commit activity has appeared since January 2019, and the repository has no security scanning or policy.
36%
Total Score
0
100
69
75
The latest release was in January 2019, with no releases in the last 12 months; this long silence is a strong abandonment concern despite the package having three historical releases.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating no observed ongoing maintenance.
The repository name matches the package, which supports ownership, but its README does not mention the package explicitly. That leaves a modest uncertainty about package-to-repository linkage.
The repository has 0 stars, 1 fork, and 1 watcher, providing little supporting evidence of adoption or community maintenance. Popularity is only supporting evidence, so this reinforces rather than determines the result.
Composer build tooling is present, but no security-scanning tools are configured. For a small package this is a hygiene gap, not a standalone dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^0.1.0-beta.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.