Package Health

vardot/varbase-build

Moved to Varbase Project https://github.com/Vardot/varbase-project

Latest 8.4.06PackagistPackagist

15%

Total Score

critical

Unfit to use: Packagist marks the package abandoned, and its repository has had no commits since 2017.

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned and points users to the Varbase Project, making this release unsuitable as an active dependency.

Release historydanger

The latest release was published in August 2017, with no releases in the last 12 months; the package has been inactive for roughly 9 years.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with a project that is no longer maintained.

Lifecycle scriptscaution

The package runs post-install and post-update scripts, increasing installation complexity and the amount of package code executed during dependency operations.

Repo toolingcaution

Composer is used for builds, but the repository reports no security scanning tooling, leaving a maintenance and oversight gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Vardot

Direct Dependencies

DependencyLast ReleaseScore
vardot/varbase
Version ^8.4.06
—
—
composer/installers
Version ^1.2.0
—
—
cweagans/composer-patches
Version ^1.6.0
—
—
drupal-composer/drupal-scaffold
Version ^2.2.0
—
—
drupal/drupal-library-installer-plugin
Version ~0.3
—
—

Weekly Downloads

Info

Last Published
9 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform