jorisnoo/craft-twig-helpers

Project backingcaution

The repository is owned by an individual user rather than an organization, so the concentrated contributor activity represents a genuine single-maintainer continuity risk.

Repo bus factorcaution

Two contributors are active, but one made 6 of 7 recent commits, leaving maintenance substantially concentrated in one person.

Security policycaution

The repository has no security policy, which leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows grant top-level write permissions, all one analyzed action reference is unpinned, and high-confidence bot-condition and template-injection findings were reported. No untrusted checkout or script-injection sink was found, so these are workflow-hygiene concerns rather than a standalone severe dependency risk.