Release activity stopped after nine releases, with no commits in the last three months. The license text does not match the manifest, and workflow dependencies are unpinned.
12%
Total Score
50
25
50
Packagist marks the entire package as abandoned, with no replacement named. This is a severe adoption risk because future fixes and maintenance are not expected.
The linked repository is archived and was last pushed on February 16, 2024, so it is no longer maintained. The README also directs users to another project, reinforcing that this package has been retired.
A license file is present, but it identifies AGPL-3.0 while the manifest declares GPL-3.0-only. The mismatch creates an avoidable licensing ambiguity for adopters.
The package has nine releases but none in the last 12 months; its latest release was on February 16, 2024. This supports the abandonment concern rather than indicating an actively maintained release line.
There were zero commits and zero active maintainers in the last three months. This is consistent with the archived status and leaves no evidence of ongoing maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
drupal/migrate_plus Version ^6 | — | — |
drupal/migrate_tools Version ^6 | — | — |
drupal/core-recommended Version ^10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.