The package has a clear README, release notes for this version, a stable version, and a small runtime dependency footprint. Maintenance stopped years ago, and the archived source plus package deprecation make future fixes unlikely.
12%
Total Score
100
56
50
The registry marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency on the package.
The package has 18 releases but none in the 12 months before collection; its latest release was in February 2022. This indicates several years without registry maintenance.
The linked repository is archived, and its last push was in February 2023. An archived source repository is a severe abandonment risk for a Drupal extension.
The repository uses Composer for builds, but no security scanning tooling was detected. This is a modest transparency and maintenance gap, secondary to the abandonment signals.
No repository security policy was detected. That limits disclosure transparency, although it is less significant than the package being deprecated and archived.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drupal/simple_sitemap Version ^3.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.