Package Health

realityloop/foundry

Composer project template for the Drupal Foundry install profile using a relocated document root

Latest 10.3.1PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Dependency profilecaution

The template declares 92 runtime dependencies, including a large Drupal application stack. This is appropriate for a full project template but increases update and maintenance exposure.

Licensecaution

The manifest declares GPL-2.0-or-later while the artifact and repository license file are detected as GPL-3.0, creating a material licensing ambiguity despite both a declaration and license files being present.

Release historycaution

This package has only one release, published 701 days ago, with no releases in the last 12 months. That provides weak evidence of ongoing release maintenance.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. That is a direct maintenance warning, although the repository's recent push timestamp provides some counterevidence.

Repo issue activitycaution

There are 9 open issues and 10 open pull requests, with one new pull request but no merged pull requests in the last month. This suggests unresolved maintenance work.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
drupal/eca
Version 1.1
—
—
drupal/eck
Version ^2.0
—
—
drupal/gin
Version ^3.0@RC
—
—
drupal/wpf
Version ^1.2
—
—
drupal/crop
Version ^2.4
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform