The package is small and focused, with a matching repository, a license, and repository tests. Its only release activity ended nearly three years ago, with no recent commits and no security scanning, so future compatibility and maintenance are uncertain.
48%
Total Score
25
100
75
67
The package has three releases, all clustered on one day in November 2023, and none in the last 12 months. This long release gap is a substantial abandonment concern for a framework extension.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of recent registry releases. No provided signal shows current maintenance capacity.
The artifact includes a license file and declares LGPL-3.0-only, which is positive for adoption. The detected file text also names GPL-3.0, creating a licensing mismatch that should be clarified.
Only one account has registry publishing access. This is not proof of poor maintenance, but combined with the lack of recent activity it indicates limited observable publishing capacity.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide little evidence of an active user or contributor community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^1.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.