memio/twig-template-engine

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The recent release history partly offsets this, but the current lack of development activity raises maintenance risk.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. That leaves vulnerability-reporting and response expectations undocumented, although the package's active release history provides some compensating evidence.

Version stabilitycaution

The assessed release is marked as a prerelease, even though it is the stable major line and recent prereleases represent only 15% of releases. Prerelease status adds adoption risk because the API may still change.

Workflow auditcaution

All three analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkouts, script injection, dangerous triggers, or other security findings, and the workflow was fully analyzed.