The repository is tiny, has no security policy or security scanning, and shows little evidence of ongoing project activity. Its stable version, clear license, README, and non-deprecated status provide some transparency but do not offset the long maintenance gap.
38%
Total Score
50
78
88
The package has made no release in over 9 years: its latest release was June 2017, with zero releases in the last 12 months. This is strong evidence of abandonment for a maintained dependency.
There were zero commits and zero active maintainers in the last 3 months, following a last push in June 2017. This is strong evidence that maintenance has stopped.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a dormant project, although the absence of open work is not independently severe.
The repository has zero stars and forks and only one watcher, indicating very limited visible adoption. Popularity is supporting evidence rather than a verdict, but it offers little evidence of a broader maintenance community.
Composer is used as the build tool, supporting reproducible package structure, but no security scanning tool is configured. The missing scanner is a moderate transparency gap for a dependency.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version >=1.31 <2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.