setono/twig-cache-purger-bundle

Release historycaution

Only two releases exist across roughly four years, with one release in the last 12 months; the recent release is positive, but the overall cadence is sparse.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance after the release.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected; this is a modest transparency gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unspecified.

Workflow auditcaution

All 17 analyzed action references are unpinned, and the audit found a high-confidence template-injection pattern. However, no pull_request_target or workflow_run trigger, untrusted checkout, or script-injection sink was observed, so these are workflow-hygiene concerns rather than a severe adoption blocker.