The README gives practical setup guidance and the package declares a clear license. The repository could not be found, while the tiny artifact and broad dependency set make maintenance and provenance hard to verify.
43%
Total Score
50
70
75
Only one release exists, published 487 days ago, with no releases in the last 12 months. This leaves current maintenance and release continuity unproven.
The package declares 22 runtime dependencies spanning Drupal core, modules, Drush, and installation tooling. This broad dependency surface increases maintenance coordination needs, especially when the package has only one release.
The artifact contains only three files: .gitignore, README.md, and composer.json. This is unusually sparse for a package that assembles a broad application stack and provides little published context for verification.
The assessed version is a prerelease, and all recent releases are prereleases. That signals an unfinished maturity level for a package intended as a Drupal application foundation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
drush/drush Version ^13 | — | — |
dropsolid/dxp Version ^0.0 | — | — |
drupal/webform Version @beta | — | — |
composer/installers Version ^2.3 | — | — |
drupal/drupal_cms_ai Version ~1.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.