This is a mature, actively maintained OpenEuropa package with a substantial release history, stable versioning, current repository activity, clear licensing, tests, changelog, and strong package/repository alignment. The organization-backed repository and ongoing releases reduce abandonment risk. The main concerns are concentrated recent commit activity, absent security scanning and security policy, and an undeclared top-level workflow permission policy; these warrant normal dependency review but do not outweigh the package's overall maintenance and transparency evidence.
88%
Total Score
88
100
89
70
post-install-cmd and post-update-cmd scripts create some execution-surface exposure during Composer operations, but lifecycle scripts are a normal mechanism for framework-integrated packages and no dangerous behavior is indicated here.
Recent activity is concentrated in one contributor with five of six commits, but a second contributor remains active and the repository is organization-owned, providing some maintenance handoff capacity.
The repository has modest popularity at 3 stars and 3 forks, but popularity is supporting evidence only and does not offset the stronger release and maintenance signals.
Composer build tooling is present, but no security scanning tools were detected, leaving a security-process gap in the repository.
No repository security policy was found, which reduces vulnerability-reporting transparency and is a genuine hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drupal/core Version ^10.3 || ^11 | — | — |
drupal/pathauto Version ^1.12 | — | — |
drupal/language_selection_page Version ^3.0 | — | — |
drupal/backport_node_storage_body_field Version ^1 || ^2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.