Package Health

litalino/flarum-ext-guestengagement

The package is clearly identified and small, with MIT licensing, a usable README, and release notes for this version. Its workflows are simple but use unpinned actions, and no security policy is published.

Latest 1.1.0PackagistPackagist

44%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

Only two releases exist, with the latest published in January 2024 and none during the last 12 months. This long release gap is a substantial maintenance concern for a package developers may need to keep compatible.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the repository’s last push in January 2024. This provides strong evidence of inactive maintenance.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, indicating very limited adoption or review beyond the maintainers. Popularity is supporting evidence rather than decisive on its own, but it provides little compensating confidence here.

Security policycaution

No security policy is present in the repository. This is a transparency and response-process gap, though it is less severe than the evidence of prolonged inactivity.

Workflow auditcaution

Both analyzed workflows were complete and had no detected dangerous triggers, sinks, or audit findings, but both of the two action references are unpinned. That leaves avoidable build-integrity risk without making the release unfit by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

litalino
Marco Colia

Direct Dependencies

DependencyLast ReleaseScore
flarum/core
Version ^1.0.0
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform