francoisvaillant/twig-trace-bundle

Maintainerscaution

Only one registry publisher is listed, which reduces publishing resilience and creates a thin maintainer base; the linked repository is user-owned rather than organization-backed.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, which is a meaningful maintenance concern for a young package despite a recent push being recorded elsewhere.

Security policycaution

No security policy was found in the linked repository, reducing transparency for vulnerability reporting, although Composer audit tooling provides some compensating security practice.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers or findings, but all 8 of 8 action references are unpinned, leaving the build exposed to moving action versions.