Healthy and suitable to use. It has recent releases, active repository work, a clear README, and a release note documenting a concrete fix; the main caveat is the small project footprint and lack of a security policy or scanning tools.
84%
Total Score
88
100
89
90
Only one account has registry publish access, which is a modest resilience concern for a user-owned project, but repository activity shows a second active contributor.
The repository has zero stars, forks, and watchers, so there is little community validation. Popularity is supporting evidence only and does not outweigh the observed release and commit activity.
Composer is used for builds, but no security scanning tools are configured. This is a transparency and process gap, though it is not evidence that the package is unsafe or unmaintained.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for consumers.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.