Twitch - Provides a Twitch online media helper
68%
Total Score
caution
Usable with caveats: maintenance is quiet and all workflow actions are unpinned.
No commits and no active maintainers were recorded during the last three months. The recent release and push provide some compensation, but the current maintenance activity is still quiet.
The repository uses Composer but reports no security scanning tools. For a package that handles external Twitch credentials and API integration, that is a meaningful hygiene gap.
No security policy is present in the repository. This weakens the documented path for reporting issues, although it does not by itself indicate abandonment.
The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or script-injection findings. However, all 9 of 9 action references are unpinned, leaving the build exposed to unexpected upstream action changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^14.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.