Check user registrations against the StopForumSpam database
12%
Total Score
50
50
83
Packagist marks the entire package as abandoned and names fof/anti-spam as its replacement. This is a direct warning against starting a new dependency on this package.
The package has 24 releases and a historically regular median interval of about 42 days, but it has had no release in nearly three years. The long release gap materially raises abandonment risk.
The repository recorded no commits and no active maintainers in the previous three months. Combined with the archived state, this indicates maintenance has stopped rather than merely slowed.
The linked FriendsOfFlarum repository is archived, so it is no longer an active maintenance target. Its last push was nearly three years before collection, making future fixes and compatibility work unlikely.
Both workflows were analyzed successfully with no untrusted checkouts, script injection, or audit findings. However, all two action references are unpinned, which is a minor reproducibility weakness rather than the reason this package is unfit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^1.2.0 | — | — |
guzzlehttp/guzzle Version ^7.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.