drustack/website-skeleton

Dependency profilecaution

The package declares 182 runtime dependencies, creating a broad update and transitive-risk surface for consumers and increasing maintenance complexity.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. This indicates a recent maintenance lull, partly offset by the repository having been pushed in June 2026.

Repo package mentioncaution

The repository name does not exactly match the package name, and the package name was not found in the README. The detailed matching Drupal project tree reduces the likelihood of an unrelated repository, but the ownership relationship does not fully remove the transparency concern.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tool is configured. For a large Drupal distribution, the missing automated security checks reduce transparency and maintenance assurance.

Security policycaution

The repository has no security policy. This leaves vulnerability reporting and response expectations undocumented.