brotkrueml/twig-codehighlight

Release historycaution

The latest release was nearly two years ago, with no releases in the last 12 months and only three releases overall. This indicates slow maintenance, although the linked repository was pushed more recently.

Repo commit activitycaution

There were no commits or active maintainers in the measured three-month period. This is a meaningful maintenance concern, though the repository's more recent push shows it is not wholly dormant.

Repo toolingcaution

The repository uses Make and Composer but reports no security-scanning tools. That is a modest engineering-hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This modestly reduces transparency for a package intended for application integration.

Workflow auditcaution

The workflow audit analyzed all workflows with no dangerous triggers, untrusted checkouts, or audit findings, but all six action references are unpinned. The complete audit limits the concern to reproducibility and action-supply-chain hygiene.