The repository has had no commits in the past three months, and the project has only one registry maintainer. A clear README, release notes for this version, licensing, and a small dependency footprint provide useful transparency.
62%
Total Score
50
100
83
83
Only one account has registry publishing access, leaving a thin publishing base; the linked repository is owned by an individual rather than an organization.
The registry namespace is cms-alchemy, while the repository is owned by the individual DanielMoody rather than an organization, providing limited evidence of institutional backing.
The package is young at 177 days and has only two releases, both published on the same day, so its maintenance track record is limited.
There were zero commits and zero active maintainers in the past three months, indicating that maintenance has currently gone quiet.
There are no open issues or pull requests and no recent issue or pull-request activity. With no reported problems this is not severe, but it offers little evidence of an active maintenance community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
drupal/core Version ^9 || ^10 || ^11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.