cakephp/twig-view

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, indicating modest recent development activity, though the release history shows ongoing publishing.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a moderate transparency gap.

Version stabilitycaution

The assessed version is marked stable and not a prerelease, but the reported latest version is 1.3.3, which conflicts with the assessed 2.1.2 and reduces confidence in the metadata.

Workflow auditcaution

The sole workflow uses read-only permissions and has no untrusted checkout or script-injection findings, but both action references are unpinned and high-confidence secrets-inherit findings expose broader credentials than needed.