Package Health/project-nos/spryker-twig-code-sniffer

project-nos/spryker-twig-code-sniffer

The package includes tests, a clear README, matching source repository, and a documented release. Its organization-backed project has had no commits or releases since February 2024, and both workflow actions are unpinned; the lack of security scanning adds a smaller concern.

Latest v1.1.1

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The latest release was on February 12, 2024, with no releases in the last 12 months. That indicates a prolonged release gap, though the package has 10 releases and is not deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This materially raises maintenance and abandonment risk.

Repo issue activity

There is one open issue and no recent issue or pull-request activity. This is consistent with inactivity but is weaker evidence than the direct commit and release signals.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance concern rather than a severe dependency risk.

Workflow audit

The only workflow was fully analyzed, uses read-only permissions, and has no detected dangerous findings, but both of its two action references are unpinned. That is a supply-chain hygiene gap without evidence of an active exploit path.