level-level/twig-loader
The package includes clear installation guidance, a matching organization-owned repository, and a small runtime dependency surface. Its workflow is basic but lacks pinned actions and repository security scanning.
58%
Total Score
75
100
75
75
Health Score Breakdown
The package has had no release in more than four years and none in the last 12 months, despite only three releases overall. This materially raises maintenance and abandonment concerns.
There were no commits and no active maintainers in the last three months, which is a meaningful sign of currently inactive maintenance even though the repository was pushed in November 2024.
The repository has no stars or forks and only four watchers. This is weak supporting evidence, but popularity alone does not determine health for a small package.
Composer is used for builds, but no security-scanning tooling is present. The missing scanning is a hygiene gap rather than evidence of abandonment.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This lowers transparency but is not a severe dependency risk on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Coen Jacobs |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^1.42 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.