The extension has a clear MIT license, a focused runtime dependency, release notes, and a matching organization-owned repository. Its beta status and five open pull requests warrant pinning this exact version and watching maintenance.
67%
Total Score
75
100
93
100
The repository recorded no commits and no active maintainers in the last 3 months, which is a meaningful maintenance concern. The recent release and June 2026 push provide some counterevidence but do not remove the slowdown.
Version 2.0.0-beta.3 is a prerelease, so its behavior and compatibility may still change. The package has released three times in the last 12 months, providing some evidence of ongoing development.
All 3 analyzed workflows are complete and have no reported audit findings or untrusted execution paths, but all 3 action references are unpinned, leaving build inputs less reproducible.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.