Package Health/nrel/vendor-registration-project

nrel/vendor-registration-project

The package lacks a security policy and consumer-facing README, while install-time scripts add operational complexity. Composer tooling and organizational ownership provide some context, but not enough to make this an attractive dependency.

Latest 1.00

Packagist

15%

Total Score

Maintainer Stability

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Release history

There has been only one release, published in September 2017, with no releases in the last 12 months. The absence of subsequent releases strongly limits confidence that defects or compatibility issues will be addressed.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity. In combination with the archived repository, this supports the conclusion that active maintenance is absent.

Repository archived

The linked repository is archived and was last pushed in April 2018, indicating the project is no longer maintained. This is a severe abandonment risk for a package intended to provide a Drupal project template.

Lifecycle scripts

The package runs post-install and post-update Composer scripts, which can change installation behavior and increase operational complexity. No provided signal shows those scripts are unsafe, so this is a moderate hygiene concern rather than a severe risk.

Package scaffolding

The package has no README, while tests and a changelog being absent are normal for a published project template. The missing README reduces transparency for consumers but is secondary to the maintenance concerns.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Damon Haley (dhaley)

Shaun Laws (slaws)

Direct Dependencies

Dependency	Last Release	Score
cweagans/composer-patches Version ^1.6.0	—	—
drupal-composer/drupal-scaffold Version ^2.0.0	—	—
nrel/nrel_vendor_registration_profile Version ^1.002	—	—