shapecode/twig-string-loader-bundle

Release historycaution

The package has existed for about 11 years with 20 releases, but only 1 release in the last 12 months, indicating a slow current cadence rather than abandonment by itself.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance warning despite the release on December 12, 2025.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting less clear for users and maintainers.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted execution paths, but all 3 action references are unpinned, weakening build reproducibility.