parisek/lint-kit
Twig and PHPStan lint rules for WordPress and Drupal projects: a CMS-neutral core and one opt-in rule set per CMS.
72%
Total Score
caution
This alpha package is only hours old, with no established maintenance history and partly unpinned CI actions.
Health Score Breakdown
The package has only two releases and is less than a day old, so there is not yet enough history to demonstrate sustained maintenance.
The indicator reports zero commits and zero active maintainers over three months, but the repository was created or updated only hours ago, so this is mainly a lack of history rather than evidence of abandonment.
No repository security policy was found. This is a transparency gap, though it is less significant for a small alpha lint-rule package than for a security-sensitive service or library.
The latest release is v0.2.0 and the package is not on a stable major version; the README also identifies the project as alpha, indicating an evolving API.
All four workflows were analyzed with no audit findings, untrusted checkouts, or script injections. However, two workflows grant top-level write permissions and four of eight action references are unpinned, creating moderate CI supply-chain hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^3.30 | — | — |
symfony/yaml Version ^6.4 || ^7.0 || ^8.0 | — | — |
vincentlanglet/twig-cs-fixer Version ^4.1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 hour ago
- Created
- 3 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.