ejunker/twitter

Release historycaution

The package has 57 releases but none in the last five years, with the latest release published about five years ago. This is a meaningful maintenance and abandonment concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the old registry release, this indicates substantially slowed maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. For a package handling API credentials and network requests, this weakens the documented process for reporting and addressing vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed and has no dangerous triggers or audit findings, but all three action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk.