This is a small, focused Drupal recipe with a clear README, changelog, explicit GPL-2.0-or-later licensing, a simple dependency profile, and no install-time lifecycle scripts. Its release history is reasonably active for a package only 132 days old, and the current version is a stable major release with no registry deprecation. However, the assessment has limited confidence because repository-backed maintenance, commit activity, contributor depth, and build transparency were not collected; the recent release profile is also heavily prerelease-oriented, and only one registry maintainer is listed. Overall, it appears usable to depend on, but its long-term maintenance transparency is not established.
78%
Total Score
50
100
90
100
Only one registry account, Vardot, has publish access. This is a limited administrative ownership base, but the signal does not establish actual inactivity or a lack of broader project contributors.
The assessed version is a stable major release and is not a prerelease, but 80% of recent releases were prereleases, which makes the package's recent versioning pattern somewhat less predictable.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
drupal/core Version ~11.4.0 | — | — |
drupal/persistent_login Version ~2.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.