Package Health

prashantsinalkar/cmiproject

It has a declared GPL-2.0-or-later license, a matching repository, and a stable version rather than deprecation or archive markers. The seven-file project and install-time Composer scripts provide limited transparency and require care when updating its dependencies.

Latest 9.3.1PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

70

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

Only two releases were published, both in October 2022, and none appeared in the last 12 months; the latest release is nearly four years old. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, reinforcing the long release gap rather than showing ongoing maintenance.

Dependency profilecaution

The project declares 11 runtime dependencies, including Drupal, Drush, Drupal Console, and a package-specific dependency, creating a relatively broad update surface. The profile fits a Drupal project but raises maintenance sensitivity when upstream activity is absent.

Lifecycle scriptscaution

The package runs post-create-project-cmd and post-update-cmd Composer scripts, which can perform actions during installation or updates. These are not inherently unsafe, but they increase the care needed when depending on a stale project.

Package file treecaution

The package and repository each contain only seven files, mostly Composer configuration and a patch, with no visible application source in the collected tree. For a Drupal distribution project this may be intentional, but it offers limited transparency.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
drush/drush
Version ^8.0
—
—
drupal/console
Version ~1.0
—
—
solarium/solarium
Version ~6.1
—
—
symfony/var-exporter
Version ~5.4.10
—
—
drupal/core-recommended
Version ~9.3.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform