The package includes tests, release notes, and a clear README, while its workflow audit found all four actions unpinned. Organization ownership does not offset the lack of security scanning.
12%
Total Score
50
40
67
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption and maintenance warning.
The package has 40 releases over roughly nine years but none in the last 12 months; its latest release was in September 2022. The historical cadence does not compensate for the prolonged release gap.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the abandonment concern.
The linked repository is archived and was last pushed in September 2022, indicating the source project is no longer actively maintained.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The archived project makes this gap more consequential.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
drupal/core Version ^9.4 | — | — |
drupal/components Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.