Moved to Varbase Project https://github.com/Vardot/varbase-project
15%
Total Score
critical
Unfit to use: Packagist marks the package abandoned, and its repository has had no commits since 2017.
Packagist marks the entire package as abandoned and points users to the Varbase Project, making this release unsuitable as an active dependency.
The latest release was published in August 2017, with no releases in the last 12 months; the package has been inactive for roughly 9 years.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with a project that is no longer maintained.
The package runs post-install and post-update scripts, increasing installation complexity and the amount of package code executed during dependency operations.
Composer is used for builds, but the repository reports no security scanning tooling, leaving a maintenance and oversight gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vardot/varbase Version ^8.4.06 | — | — |
composer/installers Version ^1.2.0 | — | — |
cweagans/composer-patches Version ^1.6.0 | — | — |
drupal-composer/drupal-scaffold Version ^2.2.0 | — | — |
drupal/drupal-library-installer-plugin Version ~0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.