aeon-php/calendar-twig

MIT licensing, repository tests, and a matching organization-backed source make the package transparent and maintainable. Its small dependency set and clean workflow audit reduce adoption friction, but recent activity is limited.

Latest 1.0.12

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about 6 years, with 15 releases and one release in the last 12 months. That supports maturity but indicates a slower recent release cadence.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. The recent repository push and release provide some counter-evidence, but the current maintenance gap still lowers confidence.

Repo tooling

Composer is used as the build tool, but no security scanning tooling was detected. The missing scanning is a modest transparency and maintenance gap.

Security policy

The repository has no security policy. For a maintained library this weakens vulnerability-reporting transparency, although it is not evidence of an active security problem.

Workflow audit

The only workflow was fully analyzed with no audit findings and no untrusted checkout or script-injection sinks. Its single action reference is unpinned, which is a minor reproducibility and supply-chain hygiene gap; the pull_request_target trigger is not dangerous on its own.