The declared GPL license and absence of install-time scripts reduce avoidable risk, while 36 runtime dependencies raise maintenance cost. The package is a very small four-file starter with no README, and the repository could not be found for verification.
45%
Total Score
50
63
75
The package has 13 releases, but none in the last 12 months and its latest release was over a year ago. The bursty release history does not compensate for the prolonged current inactivity.
Thirty-six runtime dependencies create a substantial maintenance and compatibility surface for a small starter package. This may be intentional for a site scaffold, but it still increases upkeep and upgrade exposure.
The release contains only four files, including a recipe and configuration files, which is plausible for a Drupal starter recipe but leaves little local documentation or context for consumers.
The artifact has no README, leaving consumers without package-level usage guidance. Missing tests and a changelog are not concerns here because those normally belong in the source repository rather than a published artifact.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drupal/eca Version ^2.1 | — | — |
drupal/hux Version ^1.8 | — | — |
drupal/core Version >=11.1 | — | — |
drupal/devel Version ^5.3 | — | — |
drupal/token Version ^1.15 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.