Package Health

modshield/flarum

The repository includes tests, a useful README, and a matching package reference, while the release is licensed and has no install-time scripts. Its short history, one-person commit base, missing security policy, and unpinned workflow actions leave meaningful maintenance and build-integrity concerns.

Latest v1.3.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Maintainerscaution

Only one registry maintainer is listed, which is a modest publishing continuity concern for a package without organization backing.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-maintainer and single-contributor concentration is not offset by visible organizational backing.

Release historycaution

The package is only 46 days old with four releases, all clustered within roughly two days, so there is little evidence of sustained maintenance or long-term stability.

Repo bus factorcaution

All four recent commits came from one contributor, leaving maintenance highly dependent on a single person.

Repo commit activitycaution

Four commits were made in the last three months, but this is limited activity for a new package and does not yet demonstrate sustained maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mehdi Zaïdi

Direct Dependencies

DependencyLast ReleaseScore
flarum/core
Version ^1.0
—
—
guzzlehttp/guzzle
Version ^7.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform