Is flarum/sticky safe to use?

flarum/sticky has 1 known vulnerabilities on the latest version (v2.0.0-rc.1). DepScope rates its health at 61/100 (moderate risk).

What is the latest version of flarum/sticky?

The latest version of flarum/sticky is v2.0.0-rc.1, released 2026-04-17.

Does flarum/sticky have known vulnerabilities?

Yes. flarum/sticky has 1 known vulnerabilities. See depscope.dev/pkg/composer/flarum/sticky for details.

Is flarum/sticky deprecated?

No, flarum/sticky is actively maintained. Latest release: v2.0.0-rc.1 (2026-04-17).

What are alternatives to flarum/sticky?

DepScope has no curated alternatives for flarum/sticky at this time.

What license does flarum/sticky use?

flarum/sticky is licensed under MIT.

flarum/sticky

composervv2.0.0-rc.1

Pin discussions to the top of the list.

License MITpermissive33 versions1 deps

flarum/sticky

/ 100

Health

use with caution

flarum/[email protected] low health (61/100) — consider alternatives

Update to >= 0.1.0-beta.15.1 to fix known vulnerabilities

Moderate health score (61/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

23/25

security

12/15

maturity

1/15

community

Vulnerabilities

1 medium

Advisories (1)

Severity	ID	Summary	Fixed in
medium	CVE-2021-21283	XSS in Flarum Sticky extension	0.1.0-beta.15.1

Maintainer trust

Active maintainers (3m)

3

Contributors (12m)

3

Primary author dominance

80%

GitHub stars

10

Health History

Dependency Tree

License Audit

Dependencies (1)

flarum/core

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/composer/flarum/sticky

Last updated · 2026-04-17T12:43:11+00:00