The MIT license, focused 13-file package, and absence of install-time scripts reduce adoption friction. The empty README and roughly three years without a release leave maintenance and integration concerns; pin this version rather than tracking it broadly.
42%
Total Score
100
63
100
The latest release was about 3 years and 5 months ago, with no releases in the last 12 months. That long pause is a meaningful abandonment concern despite the package having eight releases overall.
The artifact includes a README entry, but it contains no text, leaving consumers without meaningful integration guidance. Missing tests and a changelog in the published artifact are normal packaging practice and do not add risk here.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^2.0|^3.0 | — | — |
symfony/cache Version ^6.0 | — | — |
symfony/twig-bundle Version ^6.0 | — | — |
symfony/dependency-injection Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.