fivejars/openy_traction_rec
The organization owns the repository, the package is documented, and releases include notes. The license text conflicts with the declaration, while recent work comes from one contributor and no security policy is present.
78%
Total Score
67
92
75
Health Score Breakdown
The artifact contains a license file, but it was detected as GPL-3.0 while the manifest declares LGPL-3.0-or-later. That mismatch creates legal clarity risk for adopters.
All recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown in the measured period.
Only one commit was recorded in the last three months, which is thin recent activity and leaves maintenance momentum less convincing despite the recent release.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 drupal/key Version ^1.15 | — | — |
drush/drush Version ^13 || ^12 || ^11 || ^10 | — | — |
firebase/php-jwt Version >=5.2.0 | — | — |
drupal/migrate_plus Version ^5.2 || ^6 | — | — |
drupal/migrate_tools Version ^5.1 || ^6 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.