Send Telegram notifications about new discussions and posts from Flarum
68%
Total Score
60
100
81
90
Only one registry account has publish access. This is consistent with the repository being user-owned, but it leaves little publishing redundancy if that maintainer becomes unavailable.
A substantive README is present and GitHub Releases are used, but neither the artifact nor repository contains tests or a changelog; for an extension handling notifications, the missing tests are a maintenance and regression concern.
The repository owner is a user account, not an organization, so the single-maintainer concerns are not offset by explicit organizational backing.
Nine releases in 16 days show active early development, but the very short package history provides little evidence of long-term maintenance or maturity.
All 36 recent commits came from one contributor, with a 100% top-contributor share. Because the repository is user-owned rather than organization-owned, there is no provided project-backing evidence to compensate for this concentration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.