drupal/forma
The license file and stable versioning help, but the declared and detected licenses do not exactly match. No install-time scripts are present, reducing operational risk.
55%
Total Score
50
80
100
Health Score Breakdown
The package declares 57 runtime dependencies and no development dependencies, creating a large maintenance and update surface for a portfolio theme.
The package declares GPL-2.0-or-later and includes a license file, but the detected file identifies GPL-2.0, creating a licensing mismatch that should be clarified.
The package is only 94 days old with two releases and a median interval of about 55 days, so its maintenance track record is still limited.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 drupal/cva Version ^1.0.0 | — | — |
drupal/eca Version ^3.1.2 | — | — |
drupal/gin Version ^5.0.15 | — | — |
drupal/key Version ^1.22.0 | — | — |
drupal/sam Version ^1.3.2 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.