thelia/twig-engine-module

Repo bus factorcaution

One contributor made all 17 commits in the last three months, giving the project a top-contributor share of 100%. Organization backing partly offsets this, but contributor concentration remains a maintenance risk.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. The separate security policy and active release cadence partly compensate, making this a minor hygiene gap.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings. Its one action is unpinned, which leaves avoidable build-reproducibility risk, while the absence of a top-level permissions block is acceptable on its own.