The repository includes tests, a README, and release notes for this version. All four workflow actions are unpinned and no security policy is present; the package is small and documented, but adoption carries maintenance risk.
56%
Total Score
50
88
50
This is the only release, published nearly four years ago, with no releases in the last 12 months. That makes ongoing maintenance uncertain despite the package's focused scope.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported. This is a modest concern for a small package, not evidence of a security defect.
The workflow has no dangerous triggers or audit findings, but all four action references are unpinned, leaving build inputs less reproducible and more exposed to upstream changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
drupal/core Version ^9.4 || ^10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.