This release appears suitable to depend on: it is a stable major version from a package that has been active for about 506 days, with 20 releases, 13 in the last 12 months, and a repository pushed very recently. The package is licensed, non-deprecated, includes tests and a security policy, has a focused dependency profile, and avoids install-time lifecycle scripts. The main concern is concentration of maintenance: all 13 commits in the last 3 months came from one contributor, with no organizational backing indicated, while repository popularity is currently very low and no security scanning tooling is reported. These factors increase continuity and transparency risk but do not outweigh the strong recent release and commit activity.
78%
Total Score
70
100
89
100
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.