Risky to adopt: this package has had only one release, published over four years ago, with no later maintenance evidence. Its license and dependency setup are clear, but the generic unfinished README and missing source backing make ongoing support and transparency uncertain.
44%
Total Score
100
70
100
The package has only one release, with no releases in the last four years, providing strong evidence of abandonment or an unmaintained release line.
A README is present, but its 6,357-character content is largely unedited GitLab template text and offers little package-specific guidance; missing tests and a changelog are expected for a small published settings artifact.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
upstreamable/drupal-settings-db-env Version ^1.0 | — | — |
upstreamable/drupal-settings-installer Version ^1.0 | — | — |
upstreamable/drupal-settings-redis-env Version ^1.0 | — | — |
upstreamable/drupal-settings-update-env Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.