The repository has had no commits or active maintainers for about two years, and it has no security scanning or security policy. The package is licensed, non-deprecated, stable, and its repository matches the package, which limits the concern.
58%
Total Score
50
100
78
83
The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, while the absent README is a minor transparency and consumer-documentation gap for a Drupal module.
The package and repository are owned by the same individual account, providing clear ownership but no organizational backing or broader maintenance capacity.
The package has 20 releases, but none in the last 12 months; its latest release was about two years ago. This indicates stalled maintenance despite a previously active release history.
There were no commits and no active maintainers in the last three months, consistent with the package having stopped receiving updates for about two years.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of community review or backup.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ovh/ovh Version ^3.0 | — | — |
jawira/case-converter Version ^3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.