gone.io/twig-extension-gravatar

Release historydanger

The package has only two releases, both published about 5 years and 4 months ago, with no releases in the last 12 months. This is strong evidence of stagnation for a dependency that may need compatibility fixes.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history showing no activity since 2021. The project may be abandoned even though it is not marked archived.

Repo package mentioncaution

The linked repository name does not match the package name, and its README does not mention this package. That weakens provenance and raises concern that the package may be attached to an unrelated repository.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings or untrusted checkouts, but all 3 referenced actions are unpinned. That is a limited reproducibility and supply-chain hygiene weakness.