The repository has no security policy, and its small visible footprint limits confidence in long-term support. Stable releases, organizational backing, and a non-deprecated package provide useful counterweight.
58%
Total Score
75
80
50
The manifest declares MIT, but the artifact license file is recognized as GPL-2.0. This unresolved mismatch creates a real licensing and adoption concern despite the presence of a license file.
The package has 38 releases and a latest release on 2025-12-08, but only 2 releases in the last 12 months. This suggests slower ongoing maintenance than its earlier release cadence.
The repository recorded zero commits and zero active maintainers in the last 3 months. The recent release history partly offsets this, but current maintenance activity is not demonstrated.
No repository security policy was found. For a Drupal module that handles forms and data, this reduces transparency around vulnerability reporting, though it is not evidence of a security flaw.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/stopwatch Version ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.