Package Health

mehrkanal/twig-encore-extension

The package is clearly licensed, documented, and backed by an organization, with a stable release and no install-time scripts. Its maintenance evidence is dated, and the repository has neither security scanning nor a security policy.

Latest 4.0.2PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Release historycaution

The latest release was about 3 years ago, with no releases in the last 12 months. The package has seven releases and a previously regular cadence, but current maintenance appears to have stopped.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, consistent with the last repository push being about 3 years ago. This is the clearest evidence of stalled maintenance.

Repo popularitycaution

The repository has 4 stars, 0 forks, and 2 watchers. This is limited adoption evidence, though popularity is only supporting evidence and does not by itself make a small package unsafe to use.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens ongoing project hygiene without showing a direct dependency risk.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Thomas Eimers

Direct Dependencies

DependencyLast ReleaseScore
twig/twig
Version ^1.42.5 || ^2.12.5 || ^3.0.3
—
—
symfony/twig-bridge
Version *
—
—
symfony/webpack-encore-bundle
Version ^v2.0.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform