jmf/twig-array

Release historycaution

The package has only two releases over 848 days, with a median interval of nearly two years. One release in the last 12 months provides some evidence of continued availability, but the cadence remains sparse.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release indicates the project has not been completely abandoned.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Low attention is supporting evidence of a small user and contributor base, not a standalone reason to reject the package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. For this small package, that is a modest transparency gap rather than a severe risk.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, though it does not by itself indicate unsafe code.