It has a declared GPL-2.0-or-later license, a matching repository, and a stable version rather than deprecation or archive markers. The seven-file project and install-time Composer scripts provide limited transparency and require care when updating its dependencies.
38%
Total Score
0
50
70
50
Only two releases were published, both in October 2022, and none appeared in the last 12 months; the latest release is nearly four years old. This is strong evidence of abandonment risk.
The repository had zero commits and zero active maintainers in the last three months, reinforcing the long release gap rather than showing ongoing maintenance.
The project declares 11 runtime dependencies, including Drupal, Drush, Drupal Console, and a package-specific dependency, creating a relatively broad update surface. The profile fits a Drupal project but raises maintenance sensitivity when upstream activity is absent.
The package runs post-create-project-cmd and post-update-cmd Composer scripts, which can perform actions during installation or updates. These are not inherently unsafe, but they increase the care needed when depending on a stale project.
The package and repository each contain only seven files, mostly Composer configuration and a patch, with no visible application source in the collected tree. For a Drupal distribution project this may be intentional, but it offers limited transparency.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drush/drush Version ^8.0 | — | — |
drupal/console Version ~1.0 | — | — |
solarium/solarium Version ~6.1 | — | — |
symfony/var-exporter Version ~5.4.10 | — | — |
drupal/core-recommended Version ~9.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.