ouitoulia/sunchronizo_lexika
The package has clear installation documentation and a small, focused dependency set. Its licensing files disagree, and workflow references are not pinned, adding avoidable adoption friction.
15%
Total Score
30
50
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement package specified. This is a direct warning that new projects should not build on this release.
The package has 15 releases and previously released about every 7 days, but it has had no releases in the last 12 months; the latest release was more than 2 years ago.
The linked repository is archived and was last pushed in February 2024, so it is no longer an active maintenance source for this package.
A license file is present, but the manifest declares GPL-3.0-only while the artifact license file was detected as AGPL-3.0. This mismatch needs clarification before adoption.
The only workflow was fully analyzed with no dangerous findings, but both action references are unpinned. That is a modest reproducibility and supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Pietro Arturo Panetta |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ouitoulia/lexika Version ^1 | — | — |
drupal/migrate_plus Version ^6 | — | — |
drupal/migrate_tools Version ^6 | — | — |
drupal/core-recommended Version ^10 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.