litalino/flarum-adblock
The MIT license and matching repository improve transparency, and the workflows had no dangerous findings. A single maintainer, no security policy, and unpinned actions add ongoing maintenance risk.
42%
Total Score
25
80
67
Health Score Breakdown
The package has had no release in about 2 years and 10 months, with all four releases concentrated in December 2023. This strongly increases abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.
Only one registry account can publish releases. That is a thin publishing base, and the lack of recent repository activity provides no compensating evidence of active maintenance.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for a package installed into a forum application.
Both workflows use unpinned actions, which weakens build reproducibility. The audit found no dangerous triggers, untrusted checkouts, script injection, or other reported findings, limiting the concern to workflow hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Litalino |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 flarum/core Version ^1.8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.