Unfit to use: the package is deprecated and its source repository is archived. It has had no release since August 2019 and no recent commits, so maintenance and compatibility risks are substantial despite the MIT license and documented package structure.
12%
Total Score
50
100
50
100
Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning against adopting the release and outweighs the otherwise usable metadata.
The package has 10 releases overall but none in the last 12 months; its latest release was in August 2019. This long release gap indicates substantial abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers during the last 3 months. Combined with the archived repository and stale releases, this strongly indicates that fixes and compatibility updates are unlikely.
The linked repository is archived and was last pushed in November 2020, so it is no longer an actively maintained source. Organization backing provides context but does not compensate for the archived state.
The repository uses Composer for builds, but no security-scanning tools are present. The missing scanning is a modest hygiene gap; the build tooling and the more serious abandonment evidence dominate the assessment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^0.1.0-beta.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.