This release appears usable and reasonably maintained for a Drupal recipe: it has seven releases over 132 days, a recent release, a stable 1.0.1 version, an explicit GPL-2.0-or-later license, a README and changelog, no install lifecycle scripts, and a substantial recipe/configuration file tree. However, transparency and maintainership are limited because only one registry maintainer is listed and no source repository was declared, leaving repository activity, provenance, review practices, and contributor depth unverified; the high recent prerelease share also makes the stability history less convincing. The package is suitable to evaluate as a dependency, but adoption should include local validation and awareness of its reliance on eight runtime Drupal ecosystem dependencies.
72%
Total Score
50
50
90
100
Eight runtime dependencies are consistent with a Drupal recipe that builds on multiple Varbase components, but they create meaningful ecosystem coupling and should be version-compatibility tested.
A single registry account, Vardot, provides limited administrative redundancy; this is a maintainership-depth concern, although the recent release cadence provides compensating evidence of current activity.
Version 1.0.1 is a stable major release and is not a prerelease, but 5 of the 7 recent releases were prereleases, so the overall stability history warrants some caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
drupal/core Version ~11.4.0 | — | — |
drupal/webshare Version ~2.0.0 | — | — |
drupal/varbase_seo_base Version ~1.0.0 | — | — |
drupal/varbase_components Version ~4.0.0 | — | — |
drupal/varbase_media_base Version ~1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.