Package Health

mediagone/vue-in-twig-bundle

This is a young but actively maintained Composer package: it has 15 releases in 92 days, recent repository activity, a clear MIT license, a substantial README, a matching source repository, and no deprecation or install-time lifecycle scripts. Adoption carries moderate maintenance risk because all 26 recent commits come from one contributor, the artifact and repository contain no tests or changelog, the repository has no security policy or security scanning, and the package remains on an unstable 0.x major version. Overall it appears usable for dependency adoption, but consumers should expect a relatively immature project and consider pinning versions and monitoring maintenance.

Latest 0.4.10PackagistPackagist

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Package scaffoldingcaution

A substantial README documents installation and usage, but neither the artifact nor repository contains tests or a changelog, leaving useful maintenance and regression-safety gaps for a young package.

Project backingcaution

The linked repository is owned by an individual user, not an organization, so the concentrated maintainer activity cannot be discounted as normal organization-level ownership.

Repo bus factorcaution

One contributor made all 26 commits in the last three months, creating a significant single-maintainer continuity risk; the repository owner is an individual user rather than an organization.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is weak supporting evidence for maturity, but it is not by itself a decisive health problem for a young, specialized package.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning reduces assurance but is not severe on its own for this package.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
twig/twig
Version ^3.0
—
—
symfony/framework-bundle
Version ^6.1|^7.0
—
—

Weekly Downloads

Info

Last Published
24 days ago
Created
3 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform