The artifact includes a README, changelog, and coherent project files, with no install-time scripts. Its five runtime dependencies add maintenance surface, while current source and project activity could not be verified.
38%
Total Score
80
100
This package has only one release, published about 4 years and 9 months ago, with no releases in the last 12 months. That is strong evidence of staleness for a dependency.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drush/drush Version ^10 | — | — |
composer/installers Version ^1.9 | — | — |
cweagans/composer-patches Version ^1.7 | — | — |
oomphinc/composer-installers-extender Version ^2.0 | — | — |
pantheon-upstreams/upstream-configuration Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.