Annotation configuration of the allowed methods and properties for Twig_Sandbox extension
64%
Total Score
88
100
88
83
The package is mature, with 19 releases since 2014, but it had no releases in the last 12 months and its median interval is about 134 days, indicating a long current pause.
The repository had zero commits and zero active maintainers in the last three months, consistent with the extended release pause and raising abandonment risk.
Composer and Make are used for build tasks, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.
No repository security policy was found, so users lack a documented channel and process for reporting vulnerabilities.
The sole workflow was fully analyzed with no high-confidence audit findings or untrusted triggers, but all seven action references are unpinned, weakening build reproducibility and supply-chain control.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ~1.0|~2.0 | — | — |
twig/twig Version ^2.14 | ^3.0 | — | — |
symfony/validator Version ^6.0 | — | — |
doctrine/annotations Version ^1.13|^2.0 | — | — |
symfony/framework-bundle Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.