kerox/twig-image-placeholder-extension

Release historydanger

The package has had no release in nearly four years: its latest release was October 2022, despite five releases overall. This materially raises maintenance and compatibility risk for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and suggesting little current maintenance capacity.

Repo popularitycaution

The repository has one star and no forks or meaningful watcher base. Popularity is only supporting evidence, but this provides little external maintenance signal for a package with one registry maintainer.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though the small package and otherwise clear source structure limit its weight.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous sinks or audit findings, but all four action references are unpinned. That leaves routine build-integrity hygiene weaker than it should be.