The license file is present, and the dependency list is minimal. Documentation is brief, with no security policy or repository security scanning.
38%
Total Score
0
100
56
83
The package has had no releases in nearly five years, and it has no releases in the last 12 months. Fifty-one releases show earlier activity, but the long current gap raises abandonment risk.
There were no commits and no active maintainers in the last three months. Combined with the old last push and release gap, this is strong evidence that maintenance has stalled.
The artifact includes a license file, but it identifies GPL-3.0 while the manifest declares MIT. That mismatch creates a real licensing and transparency concern.
The package includes a README, and the absence of tests or a changelog in the published artifact is normal packaging practice. The README is only 37 characters, so consumer documentation is limited but not a major maintenance concern.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible adoption provides no additional confidence in long-term support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^0.1.0-beta.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.