fof/bookmarks
Clear documentation, a small runtime dependency set, and an organizational home reduce adoption friction. The release is still a pre-release, and all three workflow action references are unpinned.
82%
Total Score
100
100
88
100
Health Score Breakdown
Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than evidence of unsafe code.
Version 2.0.0-rc.3 is a pre-release, so its API and behavior may still change despite being in the stable major line.
All three workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, leaving a reproducibility and action-tampering hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 FriendsOfFlarum |
| Clark Winkelmann |
| IanM |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 flarum/core Version ^2.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.