acquia/df
Its large dependency set increases upgrade and integration risk, while repository commits have stopped for three months despite a recent release. Clear licensing, tests, release notes, organization backing, and security tooling provide useful safeguards.
68%
Total Score
67
50
100
75
Health Score Breakdown
The package declares 169 runtime dependencies and no development dependencies, creating substantial transitive upgrade and compatibility exposure for adopters.
The package runs post-install and update lifecycle scripts, which increase install-time behavior and review burden for a dependency, though this is not by itself evidence of unsafe behavior.
The repository recorded zero commits and zero active maintainers during the last three months, a meaningful maintenance concern even though the registry has a recent release.
There are 26 open issues, with no issues closed in the last month and one new pull request that was not merged, suggesting limited recent issue throughput.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 drupal/ai Version ^1.3@beta | — | — |
acquia/acf Version 2.2.x-dev | — | — |
drupal/eca Version ^3 | — | — |
drupal/fpa Version ^4.0 | — | — |
drupal/gin Version ^5 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.