Usable with caveats: the package is stable, licensed, organization-backed, and its repository is not archived, but maintenance has effectively stopped. No releases appeared in the last 12 months, there were no commits in the last 3 months, and its 81 runtime dependencies increase upgrade and maintenance burden.
58%
Total Score
50
50
78
75
The repository recorded zero commits and zero active maintainers in the last 3 months, indicating that current maintenance capacity is not visible.
The package declares 81 runtime dependencies, including many Drupal modules, creating a substantial upgrade and compatibility burden for dependents.
The artifact has no README, tests, or changelog, and the repository also reports no tests or changelog. The missing consumer documentation is a transparency and adoption gap for a Drupal base profile with many features.
The package has 21 releases since October 2022 with a typical interval of about 22 days, but no release in the last 12 months; this is a meaningful maintenance concern despite its earlier release history.
The repository has zero stars, one fork, and two watchers. Popularity is only supporting evidence, but these low numbers provide little external validation.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drupal/gin Version ^3.0@RC | — | — |
drupal/core Version ^10.2 | — | — |
drupal/diff Version ^1.1 | — | — |
drupal/lazy Version ^4.0 | — | — |
drupal/webp Version ^1.0@beta | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.