The package is clearly documented for consumers and has a small, focused runtime dependency set. The license file identifies GPL-2.0 while the manifest declares GPL-2.0-or-later, and the source repository could not be found, limiting maintenance and provenance checks.
70%
Total Score
100
90
100
The manifest declares GPL-2.0-or-later, while the artifact license file was detected as GPL-2.0. The release is licensed, but the narrower detected license does not fully match the declaration.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drupal/mercury Version ^1.0.5 | — | — |
drupal/drupal_cms_site_template_base Version ^2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.