drupal/root

It has clear GPL-2.0 licensing, no install scripts, and a focused dependency set. The repository lacks security scanning and has four unresolved issues, adding smaller transparency and follow-up concerns.

Latest 8.1.0

Packagist

35%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in the last 12 months, and its latest release was published more than 10 years ago. This strongly indicates abandonment, despite the package not being formally deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, with its last push in May 2016. The repository is not archived, but there is no observed maintenance activity to offset the age.

Repo issue activity

Four issues remain open, with no new or closed issues and no pull-request activity in the last month. This is a secondary sign of inactive maintenance rather than a standalone severe risk.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of an active community around the package.

Repo tooling

Composer is used as the build tool, which fits the package, but no security scanning tools were detected. This is a modest transparency and maintenance gap.