vardot/cv
It has a valid GPL license, a README and changelog, and its repository matches the package. Install-time scripts and no security tooling or policy add modest maintenance concerns.
38%
Total Score
50
79
50
Health Score Breakdown
The package has made no releases in the last 12 months, and its latest release was in July 2021 despite being over six years old. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.
Composer runs pre- and post-install and update scripts, which increases installation complexity and warrants maintenance attention, though the signal alone is not severe.
Composer is used as a build tool, but no security scanning tools are present. This is a modest transparency and maintenance gap rather than evidence of immediate unfitness.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This adds a modest concern alongside the stronger evidence of inactivity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Vardot |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 vardot/varbase Version ~8.8.0 | — | — |
composer/installers Version ~1.0 | — | — |
webflo/drupal-finder Version ~1.0 | — | — |
cweagans/composer-patches Version ~1.0 | — | — |
drupal/core-composer-scaffold Version ^8.8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.