The MIT license, README, and organization-backed repository provide basic transparency. The build workflows have no detected dangerous findings, though their action references are not pinned.
55%
Total Score
83
100
81
67
The package has 13 releases, but all were published in a short burst around November 2024 and none appeared in the following 12 months. That long release gap lowers confidence in ongoing maintenance.
There were no commits or active maintainers in the last three months, and the repository was last pushed about 22 months ago. This is the clearest abandonment concern in the available evidence.
Composer build tooling is present, but no security scanning tooling was detected. This is a modest transparency and maintenance gap rather than a severe risk.
The linked repository is not archived, but its last push was on November 15, 2024, consistent with the observed maintenance slowdown.
The repository has no security policy, leaving vulnerability reporting expectations undocumented. This is a minor transparency gap for a maintained extension.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^1.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.