jasny/twig-extensions

Release historycaution

The package has seven releases over roughly 12 years, with no release in the last two years and none in the past 12 months. This indicates slow maintenance, though the repository is not archived.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months. The recent push and non-archived status provide some compensation, but current development activity remains weak.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, which weakens build reproducibility.