ramsey/twig-codeblock

Release historycaution

The package has existed since 2015, but it has only five releases and none in the last 12 months; the latest release was about 18 months ago. This indicates slow maintenance rather than abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection, consistent with the lack of releases in the last 12 months. This lowers confidence in ongoing maintenance.

Workflow auditcaution

All 16 analyzed action references are unpinned, which weakens build reproducibility. The reported cache-poisoning findings are low-confidence hygiene observations, so they do not independently make this a severe risk.