techwilk/twig-hashtagify

Release historycaution

The package has existed since 2017 and has seven releases, but it has had no release in the last two years. That weakens confidence that maintenance will continue.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with no registry release in two years, this indicates limited current maintenance.

Security policycaution

The repository has no published security policy. For a small library this is a transparency gap, though the release notes do document a dependency security update.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings. However, both action references are unpinned, leaving the workflow exposed to upstream action changes.