Unfit to use for a new dependency because Packagist marks this package abandoned and names flarum-lang/french as its replacement. The source remains active, releases are regular, and the package is licensed, but those positives do not offset the package-level deprecation.
22%
Total Score
100
100
72
88
Packagist marks the package abandoned and provides flarum-lang/french as a replacement, which is a severe adoption and continuity risk for this release.
The artifact has no README, which is a transparency gap, but it includes a changelog and release notes for this exact version; missing tests are normal for a published language-pack artifact.
The repository name does not match qiaeru/lang-french and its README does not mention the package, creating uncertainty about the registry-to-source relationship; the repository appears to correspond to the stated replacement instead.
Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency gap that is outweighed by the active repository evidence.
The repository has no security policy, so vulnerability-reporting guidance is missing; this is a hygiene concern rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.