sgrichards/drupal-startup-profile

Release historydanger

The latest release was published over 8 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the package having five releases.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history showing no recent maintenance.

Dependency profilecaution

The package declares 21 runtime dependencies, creating a substantial maintenance surface for an old Drupal starter profile and increasing the chance that its assumptions no longer track its dependencies.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build setup is a modest positive, while the missing security checks reduce maintenance assurance.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is not evidence of malicious behavior.