Its license, README, tests, and changelog are reassuring, and it avoids install-time scripts. The beta release and three releases in the last 12 months limit confidence; the repository could not be found, so maintenance and provenance remain unverified.
68%
Total Score
100
80
100
The package has existed for about 6 years with 226 releases, but only 3 releases occurred in the last 12 months; its long history compensates partly for the recent slowdown.
Version 7.0.0-beta.1 is a prerelease, so its API and behavior may still change even though prereleases represent only 10% of recent releases.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
drush/drush Version ^10.3 || ^11.0 || ^12 || ^13 | — | — |
drupal/coder Version ^8.3 | — | — |
drupal/devel Version * | — | — |
symfony/dotenv Version * | — | — |
drupal/core-dev Version ~9 || ~10 || ~11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.