The declared GPL license and absence of install-time scripts reduce packaging risk. Its eight Drupal runtime dependencies make compatibility with the surrounding Drupal CMS components important.
48%
Total Score
50
80
100
The package has only two releases, with the latest published over a year ago and no releases in the last 12 months. This is meaningful abandonment risk for a package that may need to track the Drupal CMS ecosystem.
Eight runtime dependencies connect this package to Drupal core and multiple Drupal CMS components. That coupling is reasonable for demo content, but it increases the importance of coordinated maintenance and compatibility.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drupal/core Version >=10.4 | — | — |
drupal/drupal_cms_blog Version * | — | — |
drupal/drupal_cms_news Version * | — | — |
drupal/drupal_cms_events Version * | — | — |
drupal/drupal_cms_person Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.