It is licensed, has a usable README, and includes release notes for this version. The long inactivity, minimal repository, large dependency set, and unclear repository identity make long-term maintenance risky.
38%
Total Score
50
50
67
80
The package has 7 releases, but none in roughly 3 years and 6 months; the releases were concentrated in a brief initial burst with a median interval of about 20 minutes. This is strong evidence of abandonment risk.
The profile declares 39 runtime dependencies and no development dependencies. That broad dependency surface increases compatibility and maintenance burden for an apparently inactive package.
The artifact and linked repository each contain only README.md and composer.json. That is a very minimal source and package footprint for a Drupal profile claiming to install modules, themes, and demo content.
The linked repository is owned by an individual user rather than an organization, providing limited visible project backing for a package with many runtime dependencies.
There are no open issues or pull requests and no issue or pull-request activity in the last month. The empty queue is not itself bad, but the absence of activity reinforces the broader maintenance concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drupal/lazy Version ^3.11 | — | — |
drush/drush Version ^11.3 | — | — |
drupal/devel Version ^5.0 | — | — |
drupal/advagg Version ^5.0 | — | — |
drupal/ctools Version ^3.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.