Risky to adopt without confirming that the extension still works with your Flarum version: it has had no release or repository activity since December 2023 and only one published version. The linked organization repository, tests, README, and clean workflows provide useful transparency, but do not offset the long inactivity.
48%
Total Score
50
100
63
75
This is the only release, published about 2 years and 9 months ago, with no releases in the last 12 months. That leaves compatibility and maintenance uncertain.
There were no commits and no active maintainers in the last 3 months, consistent with the package's long absence of releases and a substantial maintenance concern.
One registry publisher is a narrow publishing base, but the repository is owned by an organization, which provides some backing and makes the small registry maintainer list less concerning.
The repository has zero stars and forks and one watcher. Low visibility is supporting caution, but popularity alone does not determine whether a small package is healthy.
The repository uses Composer build tooling, but has no detected security scanning. The tooling is appropriate, while the missing scanning is a modest transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^1.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.