Its long release history, recent registry release, organization-backed repository, and clear licensing provide useful continuity. However, the release is a beta and repository commit activity has stopped while all three workflow action references are unpinned.
38%
Total Score
75
79
75
Packagist marks the entire package as abandoned and names fof/webhooks as the replacement. This is a direct warning against starting a new dependency on this package, even though a successor is identified.
The repository recorded 0 commits and 0 active maintainers over the last 3 months. The recent push timestamp is a compensating sign, but it does not show sustained development activity.
The assessed release is 2.0.0-beta.3, while the registry reports 1.3.5 as the latest stable version and a 15% recent prerelease share. Depending on this beta increases compatibility and support uncertainty.
All 3 workflows were analyzed without detected dangerous sinks or audit findings, but all 3 action references are unpinned. This leaves the build exposed to future action changes and is a moderate hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^2.0.0 | — | — |
opis/closure Version ^4.5.0 | — | — |
guzzlehttp/guzzle Version 7.* | — | — |
html2text/html2text Version ^4.3.1 | — | — |
ssnepenthe/color-utils Version ^0.4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.