drupal/jsonrpc_mcp
A clear README, tests, release notes, and stable version make adoption easier. The small project footprint and lack of security tooling leave less evidence of long-term resilience.
63%
Total Score
50
100
83
75
Health Score Breakdown
The source repository is owned by an individual account rather than an organization, so the single registry maintainer does not have broader organizational backing shown by the provided evidence.
The package produced 30 releases in about five weeks, but its latest release was about 10 months ago. The burst shows initial activity, while the long gap since the latest release lowers confidence in ongoing maintenance.
The repository recorded no commits and no active maintainers in the last three months. That is concrete evidence of currently paused maintenance for a relatively new package.
The repository has 1 star, 0 forks, and 0 watchers. Low visibility is supporting evidence of a small project, but it is not by itself evidence that the package is unsafe to depend on.
Composer is used for builds, but no security-scanning tools were detected. This leaves a meaningful transparency and maintenance-hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mateu Aguiló Bosch |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 drupal/core Version ^10.2 || ^11 | — | — |
drupal/jsonrpc Version ^3 | — | — |
drupal/simple_oauth Version ^6 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 11 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.