The package is clearly licensed, focused, and has a small runtime dependency set. However, development stopped after a burst of releases, and the repository has no security policy. Pin this version if its current feature set meets your needs.
60%
Total Score
50
100
86
75
The package is young, with 15 releases since its first release about seven months ago; the median interval was about 20 minutes, indicating a concentrated initial release burst rather than an established cadence.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance concern for a package whose latest release is several months old.
The repository has no SECURITY policy, leaving vulnerability-reporting and response expectations undocumented.
Version 0.1.14 is not a stable-major release, so its pre-1.0 status indicates a higher likelihood of breaking changes despite not being marked as a prerelease.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^2.0.0-beta.6 | — | — |
flarum/tags Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.