It has a clear MIT license, minimal runtime dependencies, and no install-time scripts. The beta release and zero commits in the last three months leave maintenance continuity uncertain; unpinned workflow actions add a smaller hygiene concern.
62%
Total Score
50
100
83
67
One registry maintainer creates some continuity risk, although the linked repository is owned by the same individual and this is a small extension.
Only two releases over roughly four years, with one release in the last 12 months, indicates a thin release history and limited evidence of sustained maintenance.
The repository had zero commits and zero active maintainers in the last three months, which is the clearest evidence of currently quiet development.
The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.
The assessed release is v2.0.0-beta.1, so it may still change incompatibly even though it is the latest version.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^2.0.0-beta | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.