shahinam/shade

The stable version and MIT license make the package straightforward to adopt. Expect limited support and no recent maintenance, with no security policy or scanning evidence to guide ongoing use.

Latest 2.1.0

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only 3 releases, with none in the last 12 months, and the latest release was about 8 years ago. This strongly suggests the project is no longer actively maintained.

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months, consistent with maintenance having stopped for years. This materially increases abandonment risk.

Lifecycle scripts

post-install-cmd and post-update-cmd scripts run during Composer operations, adding execution and maintenance surface for consumers. No provided signal shows that these scripts are unsafe, so this is a limited concern rather than a severe risk.

Repo popularity

The repository has 2 stars and 1 fork, indicating a very small user and contributor footprint. Popularity is only supporting evidence, but this provides little evidence of broad community support.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. For a dependency-heavy Drupal distribution, that leaves less visible evidence of ongoing security maintenance.