The extension has a clear MIT license, a small dependency footprint, and a matching source repository. Its workflows use unpinned actions and the repository lacks a security policy.
58%
Total Score
50
93
67
This is a single-release package, and its only release was about 2 years 9 months ago, with no releases in the last 12 months. That indicates limited ongoing maintenance.
There have been no commits and no active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.
The repository has no security policy. This is a transparency and reporting gap, although it is less significant for a small extension than the lack of recent maintenance.
Both workflows were analyzed successfully and had no reported audit findings or untrusted execution paths, but both of the two action references are unpinned, leaving avoidable dependency-integrity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.