This is a mature, actively maintained, stable package with a strong release history: it has existed for over 5 years, has 83 releases, and published 10 releases in the last 12 months. The linked repository is active, not archived, organization-backed, and shows 40 commits from three maintainers in the last 3 months, with a second contributor carrying substantial activity. The package is licensed, well documented, structured as a substantial Composer/Drupal project, has no install-time lifecycle scripts, and is not deprecated. The main concerns are the absence of repository security scanning and a security policy, no packaged or repository tests, and low public popularity, but these are transparency and assurance gaps rather than evidence of abandonment; the recent release and commit activity materially compensate for them.
88%
Total Score
100
100
83
90
A substantial README and changelog are present, but neither the artifact nor repository contains tests. For a complex Drupal module, the absence of tests is a genuine assurance gap, though the documentation and changelog provide useful transparency.
The repository has only 1 star and 18 forks, indicating limited public visibility. Popularity is supporting evidence rather than a verdict, and the strong recent activity compensates for this weakness.
Composer build tooling is present, but no security-scanning tools are configured. The build setup is appropriate for the package, while the missing security automation is a modest assurance gap.
The repository has no SECURITY.md or other detected security policy, reducing transparency for vulnerability reporting and maintenance practices.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
open-y-subprojects/openy_custom Version ^3.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.