The package includes a README, changelog, and declared GPL license, with no install-time scripts. Its four runtime dependencies, beta status, and repository that could not be found leave maintenance and provenance difficult to verify.
49%
Total Score
50
80
100
The package declares four runtime dependencies and no development dependencies. This is a manageable dependency surface, though runtime coupling adds some maintenance exposure for a package with stalled releases.
The package has 16 releases and previously released about every 36 days, but there have been no releases in about two years, which raises abandonment risk.
The assessed release is a beta, and 15 of the 16 recent releases were prereleases; despite the stable major version, this indicates limited release maturity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drupal/coder Version ^8.3 | — | — |
drupal/core-composer-scaffold Version * | — | — |
phpcompatibility/php-compatibility Version * | — | — |
dealerdirect/phpcodesniffer-composer-installer Version ^0.7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.