toppy/symfony-async-twig-bundle

Licensecaution

The manifest declares a proprietary license, but no license file was detected in the package or repository. This is a meaningful transparency and reuse concern for an open-source dependency.

Release historycaution

The package has 15 releases over about eight months, showing recent publishing activity, but the latest release was about three months before collection. That pause is a modest maintenance concern.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. That is a concrete maintenance concern, although the release history shows the project was active earlier.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no community adoption evidence. Popularity is supporting evidence rather than a verdict, so this only modestly lowers confidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a hygiene gap rather than evidence that the package is unsafe.