The artifact includes a license, README, tests, and no install-time scripts. The repository could not be found, so current maintenance and build provenance cannot be verified.
18%
Total Score
50
70
100
The package has had no release for about 7 years and 4 months, with zero releases in the last 12 months. This strongly indicates abandonment despite its seven historical releases.
The package declares 11 runtime dependencies, including development-oriented Drupal tools such as devel and kint. This increases dependency and maintenance surface for a distribution that has not been updated for years.
A GPL-2.0-or-later declaration and a LICENSE file provide clear licensing. The detected GPL-2.0 text is narrower than the manifest declaration, creating a small licensing ambiguity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
drupal/core Version 8.7.* | — | — |
drupal/kint Version ^1.2 | — | — |
drupal/bulma Version ^1.0@alpha | — | — |
drupal/devel Version ^1.2 | — | — |
drupal/console Version ^1.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.