Healthy and actively maintained, with a clear repository and frequent stable releases. The main caveats are its short 100-day history, lack of tests and security policy, and a workflow with broad write permissions.
78%
Total Score
83
100
83
80
A substantial README and GitHub Releases are present, but neither the package nor repository contains tests or a changelog. The missing tests reduce maintenance confidence for a feature-rich extension.
The package and repository are owned by the same individual account rather than an organization, so continuity depends on a small personal project team.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but it does not outweigh the observed release and commit activity.
Composer build tooling is present, but no security scanning tools are reported. This is a transparency gap for a package with substantial backend and frontend functionality.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.