elightup/twig

Lifecycle scriptscaution

The package defines post-install and post-update Composer scripts, which increase installation complexity and require trust in package-time behavior. No provided signal shows these scripts are dangerous, so this is a moderate hygiene concern rather than a severe risk.

Release historycaution

There have been only two releases over 563 days, with one release in the last 12 months and a median interval of about 498 days. The latest release is recent, but the long cadence limits evidence of sustained release maintenance.

Repo popularitycaution

The repository has two stars, zero forks, and one watcher. This is limited supporting evidence, but popularity alone does not outweigh the observed organization backing and active contributors.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a transparency and assurance gap, not evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving no documented reporting or response process for vulnerabilities. This lowers transparency for a package used in WordPress plugins.