localghost/twig-hateml
The small source tree matches the package, and it has no install-time scripts or archive flag. Its dependencies are explicit, but the project lacks security scanning and a security policy.
48%
Total Score
33
100
69
88
Health Score Breakdown
The repository had zero commits and zero active maintainers in the last three months. Combined with the small contributor footprint, this raises maintenance and abandonment concerns.
The package declares no license, contains no license file, and the repository has no license file, leaving usage rights unclear.
The artifact has no readme, tests, or changelog, but tests and changelogs are normally kept in source repositories rather than published Packagist artifacts. The repository does publish GitHub releases, so this is mainly a documentation gap.
The repository is owned by an individual user rather than an organization, and no broader project backing is shown. This makes the lack of recent activity more consequential.
There are no open issues or pull requests and no recent issue or pull-request activity. This is compatible with a tiny project but gives little evidence of an active user or maintainer community.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^3.0 | — | — |
yiisoft/html Version ^3.11 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.