It remains an alpha release with twelve runtime dependencies, while its declared GPL license is clear. The repository could not be found, so maintenance and provenance could not be verified.
43%
Total Score
50
63
100
The package has had no release in the last 12 months, despite three releases overall; the latest release is over a year old, which raises abandonment concern.
Twelve runtime dependencies create a broad dependency surface and increase maintenance coupling, though this is plausible for a Drupal content recipe.
The assessed version is still an alpha, and all recent releases are prereleases, so the package may not yet provide a stable dependency target.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drupal/core Version ^10.4 || ^11 | — | — |
drupal/token Version ^1 | — | — |
drupal/trash Version ^3.0.13 | — | — |
drupal/linkit Version ^7 | — | — |
drupal/tagify Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.