The source is clearly tied to the package, has a README, release notes, and an MIT license. Its small dependency set and organization backing help, but this registry entry is no longer the maintained package to choose.
40%
Total Score
75
100
75
83
Packagist marks the entire package as abandoned and names fof/nightmode as its replacement. That makes this release a poor dependency choice despite the linked project remaining available.
The package has 42 releases over roughly eight years, but none in the last 12 months and its latest registry release was in October 2024. This indicates the registry package has gone stale.
The repository recorded no commits and no active maintainers in the last three months. Although the repository was pushed more recently, the recent activity window still shows limited ongoing maintenance.
All three workflows were analyzed without reported audit findings, dangerous triggers, or write-wide top-level permissions. However, all three action references are unpinned, leaving a minor workflow supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^1.7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.