Healthy and reasonable to adopt, with some project-hygiene caveats. It has frequent recent releases, active work from two contributors, and a matching repository, but lacks tests, a changelog, security scanning, and a security policy.
78%
Total Score
70
100
83
80
Two registry maintainers are listed. The linked repository is owned by the same individual rather than an organization, so the small publishing base provides only modest redundancy.
The package includes a substantial README and the repository uses GitHub Releases, but neither the artifact nor repository contains tests or a changelog. That weakens maintenance transparency for a package with server-side email and database behavior.
The registry namespace and repository owner match, but the owner is an individual rather than an organization. This supports package identity while offering less institutional continuity.
One issue was opened in the last month and none were closed, with no pull requests recorded. This is a small unresolved maintenance signal, though the project is only 96 days old.
The repository has zero stars, forks, and watchers. This is limited adoption evidence, but popularity alone does not outweigh the observed recent development.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.