datlechin/flarum-cbox
The artifact includes a README and release notes, with one runtime dependency and no install scripts. Its declared Unlicense conflicts with the detected MIT license, and both workflow actions are unpinned.
55%
Total Score
50
100
83
75
Health Score Breakdown
The artifact contains a license file, but the manifest declares Unlicense while the file is detected as MIT. The release is licensed, yet the mismatch creates avoidable legal ambiguity.
Only two releases were published, both within four days in August 2024, with no releases in the following 12 months. This is a meaningful maintenance concern for a dependency.
The repository recorded zero commits and zero active maintainers in the measured three-month period. Although it is not archived, the observed activity does not demonstrate ongoing maintenance.
Both workflows were analyzed without high- or medium-severity findings, and no untrusted checkout or script injection was found. However, both of the two action references are unpinned, leaving a modest supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ngo Quoc Dat |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 flarum/core Version ^1.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.