GitHub Sponsors integration for your Flarum forum
68%
Total Score
75
100
92
83
The repository recorded 0 commits and 0 active maintainers in the last 3 months, despite a recent push and release history. This indicates a meaningful current-maintenance gap.
This release is explicitly a prerelease, although prereleases represent only 10% of recent releases and the package has an established release history. That makes the version less mature than a stable release.
All 3 analyzed workflow action references are unpinned, which weakens build reproducibility. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings, limiting this to a hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^2.0.0 | — | — |
guzzlehttp/guzzle Version ^7.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.