nowo-tech/twig-inspector-bundle
Debug Twig templates in the browser: visual overlay, click-to-open in IDE, Web Profiler. Symfony 6|7|8.
62%
Total Score
caution
A high-confidence workflow finding, combined with 23 unpinned actions, makes this active package a cautious dependency.
Health Score Breakdown
All seven workflows were analyzed, but all 23 action references are unpinned. The high-confidence template-injection finding in coderabbit.yml occurs in a workflow that also has an untrusted checkout and workflow_run trigger, creating a meaningful workflow supply-chain risk; one workflow also grants top-level write permissions.
The top contributor made 28 of 36 commits, or about 78%, which concentrates maintenance responsibility. However, two other contributors were active and the organization-owned project provides some handoff capacity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Héctor Franco Aceituno |
| Nowo.tech |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^3.8 || ^4.0 | — | — |
symfony/config Version ^6.4 || ^7.0 || ^8.0 | — | — |
symfony/console Version ^6.4 || ^7.0 || ^8.0 | — | — |
symfony/routing Version ^6.4 || ^7.0 || ^8.0 | — | — |
twig/extra-bundle Version ^3.12 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.