Robo Tasks for Drupal projects
59%
Total Score
caution
Usable with caveats: three months without commits, a license mismatch, and limited security practices lower confidence.
The package declares GPL-2.0+ but its LICENSE file is detected as GPL-3.0, creating a licensing ambiguity despite license files being present in both the artifact and repository.
The repository recorded zero commits and zero active maintainers in the past three months. A current release and recent repository push provide some counterevidence, but the lack of sustained development lowers maintenance confidence.
Nine issues remain open, with no issues opened or closed in the past month; one merged pull request shows some recent activity but not enough to offset the stagnant issue queue.
Composer build tooling is present, but no security scanning tools were detected, leaving a preventable gap in repository security hygiene.
The repository has no published security policy, making vulnerability reporting and response expectations less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
drush/drush Version >=9.6 | — | — |
vlucas/phpdotenv Version >=5.0 | — | — |
drupal/config_split Version ^2.0 | — | — |
genesis/behat-fail-aid Version ^3.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.