centarro/commerce-kickstart-project
The project has two active contributors and an organization behind it, with five recent commits. A clear README, release notes, matching repository, and explicit license support dependable adoption; the missing security policy is a modest transparency gap.
84%
Total Score
88
94
50
Health Score Breakdown
The package runs pre- and post-install/update Composer scripts. Such scripts are expected for a Drupal project template, but they add installation complexity and deserve awareness when adopting it.
The repository has only one open pull request and no issues or pull requests changed in the last month. This is a minor activity gap, but recent releases and commits provide stronger maintenance evidence.
Composer build tooling is present, but no security-scanning tool was detected. This is a modest repository hygiene gap rather than evidence that the release is unsafe.
The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, although active releases and organization backing partly compensate.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Centarro |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 drush/drush Version ^13 | — | — |
vlucas/phpdotenv Version ^5.1 | — | — |
composer/installers Version ^2.0 | — | — |
webmozart/path-util Version ^2.3 | — | — |
webflo/drupal-finder Version ^1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.