Package Health

acquia/orca

A tool for testing a company's software packages together in the context of a realistic, functioning, best practices Drupal build

Latest v5.1.2PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Dependency profilecaution

The package declares 35 runtime dependencies, including Composer, Drupal analysis, Symfony, and testing-related components. That broad dependency surface raises update and compatibility burden, though it fits the package's role as an integration-testing tool.

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during dependency installation or updates. This is common for Composer tooling but increases installation complexity and the code executed during dependency operations.

Repo commit activitycaution

The repository has 0 commits and 0 active maintainers in the last three months. Although a recent push and six releases in the last year provide some compensation, the current development activity is a meaningful maintenance concern.

Repo issue activitycaution

Three pull requests were opened in the last month and none are reported as merged, while no new issues were opened. This shows some activity but limited completed work.

Version stabilitycaution

The assessed release is marked stable and not a prerelease, with no recent prerelease share. However, the reported latest registry version is older than the assessed v5.1.2, which creates a small transparency concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Acquia Engineering
Travis Carden

Direct Dependencies

DependencyLast ReleaseScore
phpmd/phpmd
Version ^2.13
—
—
symfony/yaml
Version ^6.3.0
—
—
ergebnis/json
Version ^1.3.0
—
—
symfony/cache
Version ^6.4.18
—
—
oscarotero/env
Version ^2.1
—
—

Weekly Downloads

Info

Last Published
7 months ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform