Package Health

novicell/drupal-premium

The README is a generic template, and the project lacks a security policy and security scanning. Organization backing, stable versioning, and a non-archived repository provide some support.

Latest 11.2.2PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

71

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Package scaffoldingcaution

The package includes a README, but it is an unfilled generic template with no package-specific setup guidance. Missing tests and changelog files are expected in the published artifact and are not concerns here.

Release historycaution

The package has 149 releases and is about 444 days old, but only 2 releases occurred in the last 12 months, indicating a recent slowdown in maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The recent release provides some counterevidence, but the current lack of activity raises abandonment risk.

Repo package mentioncaution

The repository name matches the package name, so the source appears appropriately linked. Its README does not mention the package, which limits documentation transparency but does not suggest a repository mismatch.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a transparency and maintenance gap for a package with a large dependency profile.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
drupal/gin
Version ^4.0
—
—
drupal/rdf
Version ^3.0
—
—
drupal/webp
Version ^1.0@RC
—
—
drush/drush
Version ^13
—
—
drupal/atoms
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
11 months ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform