jacerider/neo_icon
It has a clear README, tests, changelog, and frequent releases. The repository has no security policy, so transparency remains limited.
68%
Total Score
67
100
88
75
Health Score Breakdown
The manifest declares a proprietary license, with no license file detected in the package or repository. This creates a meaningful adoption and transparency concern for a dependency.
The repository is owned by an individual user rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
One contributor made all 35 commits in the last three months, giving the project a bus factor of one. That concentration increases continuity risk despite the recent activity.
Composer is used as a build tool, but no security-scanning tools were detected. The missing scanning is a modest transparency and maintenance gap rather than a severe risk by itself.
The repository has no security policy. For a dependency with substantial PHP and Drupal integration code, this limits clarity about vulnerability reporting and handling.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Cyle Carlson (JaceRider) |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 drupal/core Version ^11.3 | — | — |
jacerider/neo_modal Version ^1 | — | — |
jacerider/neo_config_file Version ^1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.