The extension is compact and clearly licensed, with release notes and no install-time scripts. Its single release, zero recent commits, and one-person ownership leave maintenance continuity uncertain.
62%
Total Score
50
100
81
83
Only one account has registry publish access. The linked repository is also user-owned rather than organization-backed, so there is little visible redundancy if the maintainer stops supporting it.
This is the only release, published 130 days ago, so there is limited evidence of an established release cadence or long-term maintenance.
There were zero commits and zero active maintainers during the last three months, which is a meaningful maintenance-continuity concern for a package with only one release.
The repository name does not match the package name, and no README mention was collected, so the linkage is less transparent. The different name may reflect a Flarum extension repository, but the package relationship is not explicitly evidenced here.
Composer is used for the build, but no security-scanning tools are present. For this small extension that is a modest hygiene gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.