Package Health

d-f-d/twig

The repository is tiny, has no security policy or security scanning, and shows little evidence of ongoing project activity. Its stable version, clear license, README, and non-deprecated status provide some transparency but do not offset the long maintenance gap.

Latest v1.2.1PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Release historydanger

The package has made no release in over 9 years: its latest release was June 2017, with zero releases in the last 12 months. This is strong evidence of abandonment for a maintained dependency.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last 3 months, following a last push in June 2017. This is strong evidence that maintenance has stopped.

Repo issue activitycaution

There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a dormant project, although the absence of open work is not independently severe.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, indicating very limited visible adoption. Popularity is supporting evidence rather than a verdict, but it offers little evidence of a broader maintenance community.

Repo toolingcaution

Composer is used as the build tool, supporting reproducible package structure, but no security scanning tool is configured. The missing scanner is a moderate transparency gap for a dependency.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
twig/twig
Version >=1.31 <2
—
—

Weekly Downloads

Info

Last Published
9 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform