davidjguru/summerhouse

Usable with caveats: it is a clearly documented, licensed Drupal training environment with a matching repository and a real release record. The release is nearly four years old, recent commit activity is absent, and the repository lacks a security policy and explicit workflow permissions.

Latest v1.0.1

Packagist

62%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The package has 11 runtime dependencies, including Drupal core, Drush, GraphQL, and development-oriented tooling; that breadth is appropriate for a full training environment but increases maintenance exposure.

Lifecycle scripts

The package defines a post-install-cmd script, so installation performs an action beyond dependency extraction; the available signal does not show that the script is unsafe, but it warrants review before automated installation.

Project backing

The registry namespace and repository owner match, and the repository is user-owned rather than organization-owned; the single registry maintainer therefore represents a genuinely narrow ownership base.

Release history

Only two releases were published, with the latest in July 2022 and no releases in the last 12 months, indicating a largely inactive release channel for a package developers may need to keep current.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, leaving current maintenance capacity unproven despite the repository not being archived.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

David Rodriguez - @davidjguru

Direct Dependencies

Dependency	Last Release	Score
d3/d3 Version ^3.5	—	—
drush/drush Version ^11.0	—	—
drupal/devel Version ^4.1	—	—
drupal/graphql Version ^4.3	—	—
composer/installers Version ^1.9	—	—