shahinam/shade-project

Risky to adopt: the package has had no release or repository activity for nearly nine years, leaving its Drupal project-template dependencies and maintenance status unverified. It is licensed and clearly backed by the matching repository, but the prolonged inactivity outweighs those basic hygiene positives.

Latest 3.0.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in December 2017, with no releases in the last 12 months; nearly nine years without a release is strong evidence of abandonment for a project template.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the package's nearly nine-year release gap and indicating no current maintenance capacity.

Lifecycle scripts

The package runs post-install and post-update Composer scripts, increasing the importance of ongoing review because these actions execute during dependency operations; no provided signal shows that the scripts are currently maintained or audited.

Package file tree

The artifact and repository have matching four-file trees, reducing concern that the registry release is unrelated to the linked source repository, although the very minimal project offers little maintenance evidence.

Repo tooling

Composer build tooling is present, but no security-scanning tooling is configured. For a small project this is a modest hygiene concern rather than evidence that the package is unsafe by itself.