Usable with caveats: the package is small, clearly documented, licensed, and backed by the matching organization, but maintenance appears dormant. There have been no releases for over four years and no repository commits for nearly four years, so compatibility with newer Drush versions is uncertain.
58%
Total Score
75
100
81
90
The latest release was published in January 2022, with no releases in the following four years and only four releases overall. This is a meaningful maintenance concern, although the package may be intentionally stable.
The repository recorded no commits and no active maintainers in the last three months, and its last push was in October 2022—nearly four years ago. This indicates limited evidence of ongoing maintenance.
The repository has zero stars, forks, and watchers, providing no supporting community-adoption evidence. Popularity is only supporting evidence, so this modestly lowers confidence rather than determining the verdict.
The repository uses Composer, appropriate for a PHP package, but has no security-scanning tools. For this small, inactive package that is a transparency gap, though not by itself a severe risk.
No repository security policy was found, reducing transparency for reporting vulnerabilities. This is a hygiene concern rather than evidence that the package is unfit to use.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drush/drush Version >=9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.