The README and exact-version release notes make this small extension understandable, and its single runtime dependency keeps integration simple. Maintenance evidence is limited, so pinning 1.0 is sensible.
63%
Total Score
75
100
86
83
There has been only one release, published about eight months ago, with no subsequent release activity. That is a meaningful maintenance concern for a dependency, though it may be adequate for a small stable extension.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the concern raised by the single-release history and indicating limited recent maintenance evidence.
Composer is used as the build tool, which fits the package ecosystem. No security scanning tool was detected, a modest transparency and hygiene gap for a project with no other security process shown.
The repository has no security policy. This is a minor transparency gap for a small extension, but it does not by itself indicate abandonment or unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.