The README is a generic template, and the project lacks a security policy and security scanning. Organization backing, stable versioning, and a non-archived repository provide some support.
58%
Total Score
75
71
75
The package includes a README, but it is an unfilled generic template with no package-specific setup guidance. Missing tests and changelog files are expected in the published artifact and are not concerns here.
The package has 149 releases and is about 444 days old, but only 2 releases occurred in the last 12 months, indicating a recent slowdown in maintenance.
There were no commits and no active maintainers in the last 3 months. The recent release provides some counterevidence, but the current lack of activity raises abandonment risk.
The repository name matches the package name, so the source appears appropriately linked. Its README does not mention the package, which limits documentation transparency but does not suggest a repository mismatch.
Composer is used for builds, but no security scanning tools were detected. This is a transparency and maintenance gap for a package with a large dependency profile.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drupal/gin Version ^4.0 | — | — |
drupal/rdf Version ^3.0 | — | — |
drupal/webp Version ^1.0@RC | — | — |
drush/drush Version ^13 | — | — |
drupal/atoms Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.