marcw/twig-heroicons

Release historycaution

The package has only two releases, both published in April 2021, and none in the last 12 months. This is a meaningful maintenance concern for a library dependency, although a stable, narrow-purpose package may require few changes.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with no releases since 2021. The lack of recent development increases abandonment risk.

Security policycaution

The repository has no security policy or documented reporting path. This reduces transparency and supportability, though it is less concerning for a small, narrowly scoped integration.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both action references are unpinned. This is a supply-chain hygiene weakness without evidence of an active workflow exploit.