alloy/assembly
The repository includes tests and is backed by an organization, which supports basic project maturity. No security policy or automated security scanning is visible, leaving maintenance and disclosure practices less transparent.
55%
Total Score
75
50
50
Health Score Breakdown
The package has only two releases, both published on May 7, 2025, and none in the last 12 months despite being about 499 days old. This is strong evidence of stalled maintenance.
The repository recorded zero commits and zero active maintainers during the last three months. That inactivity raises abandonment risk for a package intended to support ongoing Drupal projects.
Composer is used for the build, but no security scanning tools are configured. The missing scanning is a transparency and maintenance weakness, though it is not by itself evidence of an unsafe release.
The linked repository has no security policy or documented vulnerability-reporting path. That makes future security coordination less transparent.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.