Documentation, licensing, tests, and a small dependency footprint provide a solid starting point. Pin a later stable release once ongoing maintenance is demonstrated.
62%
Total Score
75
100
79
67
The package is only 0 days old with two releases and no meaningful release interval, so it has not yet demonstrated a sustained maintenance cadence.
There were no commits or active maintainers in the last 3 months, but the package is brand new, so this is limited evidence rather than proof of abandonment.
The repository uses Composer build tooling, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.
No repository security policy was found. This is a transparency gap for reporting and handling security issues, though it is not severe on its own.
The assessed version is a prerelease beta, and all recent releases are prereleases; this indicates the API and behavior may still change.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.