djboris88/twig-commented-include

Project backingcaution

The registry namespace and repository owner match, but ownership is an individual account rather than an organization. This provides direct identity consistency but limited visible backing capacity.

Release historycaution

The package has four releases since December 2018, but none in the past 12 months and the latest release was about 2 years and 8 months ago. This indicates limited ongoing maintenance for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past 3 months, consistent with the long gap since the last release. This is a meaningful abandonment concern, though the package is small and stable.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a small template extension this is a transparency and response-process gap, but it is not severe by itself.