This is a usable but relatively young package with a healthy declared GPL-2.0-or-later license, no deprecation, no install-time lifecycle scripts, and a documented recipe structure. Its release cadence is active, but the package has only 131 days of history, most recent releases were prereleases despite a stable 1.0.0, it has no packaged tests, and its ten runtime dependencies create a broad dependency surface; repository-backed maintenance evidence was not available, limiting transparency and confidence in long-term support.
62%
Total Score
50
50
70
100
The package declares ten runtime dependencies and no development dependencies; the broad runtime surface increases upgrade and transitive-maintenance exposure, although it is consistent with a base recipe that composes multiple AI features.
One registry account, Vardot, has publish access. This establishes a concentrated publishing path but is administrative metadata rather than evidence of actual maintenance activity, so it does not offset the limited repository and historical coverage.
A 2,764-character README and changelog are present and explain the recipe and its sub-recipes, but no packaged tests are present; for a configuration recipe this is a modest maintenance gap rather than a severe concern.
Seven releases in 131 days, with releases in the last 12 months and a median interval of about 20 days, show active early maintenance; the short history still provides limited evidence of durability.
The latest version is a stable 1.0.0 major release, but 6 of the 7 recent releases were prereleases, indicating that the project is still undergoing substantial iteration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
drupal/eca Version ~3 | — | — |
drupal/core Version ~11.4.0 | — | — |
drupal/drupal_cms_ai Version ~2 | — | — |
drupal/varbase_ai_safety Version ~1.0.0 | — | — |
drupal/ai_integration_eca Version ~1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.