mmx/twig

Release historycaution

The package is 857 days old but has only three releases, all concentrated around its initial publication; it has had no release in the last 12 months. This indicates a real maintenance concern despite the stable 1.0.2 version.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release activity for over two years. This lowers confidence in timely fixes.

Repo toolingcaution

Composer is used for the build, which supports a conventional package workflow, but no security-scanning tools are present. The missing scanning is a modest hygiene concern rather than a severe risk.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap, though it is not evidence of a security defect.