chmez/d8

Registry deprecationdanger

Packagist marks the package as abandoned and names `ohorbatiuk/d8` as its replacement. This is a severe transparency and dependency-safety concern even though other signals show recent activity.

Dependency profilecaution

The package declares 22 runtime dependencies, including Drupal core, modules, themes, and Composer tooling. This is plausible for an installation profile, but the broad dependency surface increases upgrade and transitive-maintenance burden.

Package scaffoldingcaution

A README is present, but neither the package nor repository contains tests or a changelog. For a Drupal installation profile this is partly understandable, but the absence of both forms of verification and release documentation still lowers transparency.

Project backingcaution

The repository is owned by an individual user rather than an organization. That is consistent with a small project but offers limited evidence of institutional maintenance capacity.

Repo bus factorcaution

One contributor made all 6 commits in the last 3 months, giving the project a 100% top-contributor share. Because the repository owner is an individual rather than an organization, this is a genuine maintenance-continuity risk.