drupal/core-dev-pinned
The linked project remains active, organization-backed, and regularly released, with two recent contributors. Those strengths do not make this withdrawn package a sound dependency; use its stated replacement instead.
18%
Total Score
100
63
50
Health Score Breakdown
The package is marked abandoned for the entire package, with drupal/core-dev named as the replacement. This is a decisive adoption risk even though the repository remains active.
The repository uses Composer for builds, but no security-scanning tooling was detected. This is a modest transparency and hygiene gap, secondary to the package's abandonment.
No repository security policy was detected, leaving vulnerability-reporting expectations unclear. This adds a small transparency concern, but the package deprecation remains the main reason not to adopt it.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 behat/mink Version v1.13.0 | — | — |
brick/math Version 0.14.1 | — | — |
drupal/core Version 12.0.0-alpha1 | — | — |
ramsey/uuid Version 4.9.1 | — | — |
drupal/coder Version 9.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 18 days ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.