mmx/twig

It has a clear MIT license, a small dependency set, and no install-time scripts. Its release notes and linked source provide useful context, but ongoing support capacity is limited.

Latest 1.0.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is 857 days old but has only three releases, all concentrated around its initial publication; it has had no release in the last 12 months. This indicates a real maintenance concern despite the stable 1.0.2 version.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release activity for over two years. This lowers confidence in timely fixes.

Repo tooling

Composer is used for the build, which supports a conventional package workflow, but no security-scanning tools are present. The missing scanning is a modest hygiene concern rather than a severe risk.

Security policy

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap, though it is not evidence of a security defect.