Writes out version information to the .info.yml files for Drupal projects.
58%
Total Score
75
79
100
The artifact and repository both contain a license, so licensing is transparent. The detected GPL-2.0 text is narrower than the declared GPL-2.0-or-later expression, creating a minor clarification concern.
The package has five releases over roughly nine years, but none in the last 12 months and the latest was published in May 2021. This indicates a substantial maintenance gap for a dependency that may need current Composer compatibility.
There were no commits and no active maintainers in the three months measured. Combined with the older latest release, this supports a real abandonment concern rather than a merely cosmetic gap.
Version 2.0.0-rc1 is a prerelease, and 80% of recent releases were prereleases. That increases compatibility uncertainty even though the major version is established.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.