A small three-dependency recipe has a clean five-file artifact, a declared GPL license, and no install scripts. The repository could not be found, so ongoing maintenance and provenance could not be checked.
61%
Total Score
100
90
100
The package is 302 days old with only two releases and a median interval of about 120 days, so its long-term maintenance record is still limited.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drupal/belgrade Version ^3.0.4 | — | — |
drupal/theme_switcher Version ^2 | — | — |
drupal/commerce_recipe_core Version ^1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.