The stable 1.2.0 line and lack of install-time scripts are positives. However, the package is only about six and a half months old, releases arrive roughly every four and a half hours, and its 54 runtime dependencies increase maintenance risk. The repository could not be found, so maintenance and provenance remain unverifiable.
43%
Total Score
50
75
100
The package declares 54 runtime dependencies and no development dependencies, creating a broad transitive maintenance and compatibility surface. The dependency set is consistent with a Drupal site distribution, but still increases operational coupling.
No license is declared, no license file was detected, and no repository license could be checked. This leaves usage and redistribution rights unclear for adopters.
The package is about six and a half months old with 13 releases, all within the last year, and a median release interval of roughly four and a half hours. That rapid, young release history provides limited evidence of long-term stability.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drupal/ai Version ^1.3.1 | — | — |
drupal/cva Version ^1.0.0 | — | — |
drupal/eca Version ^3.0.11 | — | — |
drupal/gin Version ^5.0.12 | — | — |
drupal/key Version ^1.22.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.