OS2Forms REST API
62%
Total Score
caution
Usable with caveats: no recent commits and workflow hygiene issues reduce confidence.
The repository recorded zero commits and zero active maintainers in the last 3 months. Although a release was published today, the lack of recent source activity is a meaningful maintenance concern.
The repository has zero stars, one fork, and two watchers. This is limited adoption evidence, but popularity is supporting context rather than a health verdict.
No security policy was found in the repository. For an API module handling authentication and form submissions, this reduces transparency around vulnerability reporting.
All 6 of 6 analyzed action references are unpinned, and the audit found a high-confidence template-injection issue in the changelog workflow. The repository has no untrusted checkout or script-injection trigger, so these are workflow hygiene concerns rather than a severe standalone risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
drupal/key_auth Version ^2.0 | — | — |
os2forms/os2forms Version ^4.0 || ^5.0 | — | — |
drupal/webform_rest Version ^4.2 | — | — |
cweagans/composer-patches Version ^1.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.