Open-source projects, maintainers and community process.
View All Tags
Drupal contrib security review needs explicit access decisions, CSRF protection on state-changing routes, output checks and a repeatable release gate. This checklist focuses on those checks and the limits of grep-based searches.
Asking a Drupal site which PHP version it runs should not require an SSH key and a terminal. I built Project Context Connector, a Drupal module that exposes a read-only JSON snapshot of site configuration to AI agents, automation scripts and monitoring tools. Each tool reads the same snapshot through one of four interfaces: REST, an HMAC-signed endpoint (a request signed with a shared secret), Drush or native Model Context Protocol (MCP) support.