Package Health

droath/drush-module-sync

The package has a README, tests, a matching source repository, and an MIT declaration. Its Drupal/Drush scope is clear, but adopting an unmaintained 0.0.x release is a long-term liability.

Latest 0.0.3PackagistPackagist

35%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

67

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has had only 3 releases, all concentrated in May 2017, with no releases in the last 12 months and no newer release after 2017. This is strong evidence of abandonment for a dependency intended to support evolving Drupal and Drush environments.

Repo commit activitydanger

There were 0 commits and 0 active maintainers in the last 3 months, consistent with the last repository push being in 2017. This indicates no current maintenance capacity.

Repo issue activitycaution

There has been no issue or pull-request activity in the last month, and one issue remains open. This reinforces the lack of recent project attention, although the small issue count is not itself severe.

Repo toolingcaution

Composer build tooling is present, which supports reproducible project structure, but no security-scanning tooling was detected. This is a modest hygiene gap rather than a standalone adoption blocker.

Security policycaution

The repository has no security policy. For a small, old package this is a transparency gap, but it is secondary to the much stronger evidence of abandonment.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Travis Tomka

Direct Dependencies

DependencyLast ReleaseScore
drush/drush
Version ^8.1
symfony/yaml
Version ^2.8

Weekly Downloads

Info

Last Published
9 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform