Package Health

ahillio/civibase

Varbase: The Ultimate Drupal 8 CMS Starter Kit (Bootstrap Ready) | by Vardot

Latest 9.0.0-alpha1PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

70

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has 73 releases and a historically regular median interval of about 14 days, but its latest release was nearly six years ago and there were no releases in the last 12 months. That prolonged stoppage is a serious abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the nearly six-year release gap. This materially raises the risk that issues and compatibility changes will go unattended.

Lifecycle scriptscaution

The package defines pre- and post-install/update Composer scripts. These may be normal for a Drupal distribution, but they increase installation complexity and the amount of package behavior that must remain maintained.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is secondary to the clear maintenance stagnation.

Version stabilitycaution

The assessed version is still a 9.0.0 alpha release, so it carries prerelease stability risk in addition to the long gap since the package's latest publication.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Vardot

Direct Dependencies

DependencyLast ReleaseScore
drupal/core
Version ^9 || ~10.0.0
—
—
bower-asset/c3
Version 0.4.*
—
—
bower-asset/d3
Version 3.5.*
—
—
npm-asset/blazy
Version ~1.0
—
—
drupal/varbase_api
Version ~9.0
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform