It has a clear README, a license, regular releases, and a small runtime dependency surface. The beta label and absent security policy leave less assurance for long-term adoption.
72%
Total Score
75
100
92
50
All 12 commits in the last three months came from one contributor, giving the project a single-person maintenance dependency and increasing continuity risk.
The repository has no security policy. For an extension handling notification functionality, this reduces transparency about vulnerability reporting and response expectations.
The assessed release is 2.0.0-beta.1, so it is explicitly prerelease even though the package has an established release history. That lowers confidence in compatibility and API stability.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^2.0.0-beta | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.