Usable with caveats: the repository is active, backed by an organization, and uses tests, security scanning, and read-only workflow permissions. It is still a young one-release package with only one recent contributor and no README or security policy.
70%
Total Score
83
86
83
The package includes tests and a GitHub release with notes for version 1.0.0, but it has no README, leaving consumers without basic integration guidance.
This is a young package at 140 days old with only one release, so there is limited evidence of long-term maintenance and release consistency.
The repository had one commit in the last three months from one active maintainer, showing some recent activity but a thin maintenance record.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
drupal/core Version ^10.0 || ^11.0 | — | — |
digital-marketing-framework/distributor-cookie Version ^1.0 | — | — |
digital-marketing-framework/drupal-distributor-core Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.