darkle/fancybox
It has a clear MIT license, release notes, a readable package, and a small runtime dependency footprint. Prefer flectar/flarum-fancybox instead; this beta release is deprecated and the repository has had no commits in the last three months.
38%
Total Score
75
100
75
75
Health Score Breakdown
Packagist marks the entire package as abandoned and points to flectar/flarum-fancybox, making this release a poor long-term dependency choice despite other healthy signals.
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance warning, though the recent push and release history show some earlier activity.
Composer is used for builds, but no security scanning tools were detected, leaving a modest repository hygiene gap.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
The assessed release is 3.0.0-beta.1, so it is explicitly prerelease and may change incompatibly; the low recent prerelease share provides only limited reassurance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Flectar |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 flarum/core Version ^2.0.0-beta | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.