This is a usable but still relatively young package with a clear GPL-3.0-or-later license, a substantial 315-file Drupal implementation, stable releases, and a recent repository push. However, maintenance evidence is mixed: the repository recorded no commits or active maintainers in the last 3 months, has no tests or changelog, has no security policy or security-scanning tooling, and is backed by a single individual account with no demonstrated popularity. The latest release and recent push reduce abandonment concerns, but the available evidence supports caution before adopting it as a critical dependency.
58%
Total Score
50
100
83
90
Only one registry account has publish access. This is a limited publishing base, and the individual ownership context provides less redundancy if that maintainer becomes inactive.
A substantial README and repository-backed GitHub Releases provide useful documentation and release visibility, compensating for the absence of packaged tests and a changelog for this starter/scaffolding package. The lack of tests still limits verification, but it is not severe enough to outweigh the available documentation and release evidence.
The repository owner is a User rather than an organization, so the project has no demonstrated organizational backing in the collected evidence. Combined with the single registry maintainer, this increases continuity risk.
The repository recorded 0 commits and 0 active maintainers over the last 3 months, indicating a recent collapse in observed development activity. The recent push and release history partially compensate, but this remains the strongest abandonment concern in the collected signals.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This may reflect a small or quiet project, but it provides little evidence of community review or maintenance responsiveness.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
drupal/core Version ^11.3 | — | — |
drupal/pathauto Version ^1.12 | — | — |
drupal/paragraphs Version ^1.17 | — | — |
drupal/layout_builder_styles Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.