GCWorld Interfaces
72%
Total Score
caution
Frequent stable releases support this package, but one-contributor maintenance and unpinned workflow actions add meaningful risk.
One contributor made all three recent commits, leaving the project dependent on a single active maintainer despite organization backing.
Three commits landed in the last three months, showing current activity, but all activity comes from one maintainer.
The repository has zero stars and forks and one watcher; this is weak supporting evidence, but popularity is not decisive for a small interface package.
No security policy is present, which weakens the project's published process for reporting and handling vulnerabilities.
The workflow is fully analyzed, uses read-only permissions, and has no detected high-confidence findings, but all 3 of 3 action references are unpinned, weakening build reproducibility and supply-chain protection.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.19 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.