The MIT license, readable documentation, release notes, and small runtime dependency set make the package straightforward to adopt. A single registry maintainer and absent security policy reduce resilience if maintenance stops.
54%
Total Score
25
100
80
75
The package has 9 releases since January 2025 but none in the last 12 months, with the latest release about 20 months ago; this is meaningful evidence of stalled maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, reinforcing the extended release gap and increasing abandonment risk.
One person has registry publish access. That is a thin publishing base for a user-facing extension and leaves little visible redundancy if the maintainer becomes unavailable.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities, though this is a hygiene gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^1.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.