xervice/twig

Risky to adopt: the last release and repository update were over eight years ago, with no recent commits or active maintainers. It has a clear MIT license, tests, a README, and matching organization-backed source, but the long abandonment gap outweighs those positives.

Latest 3.0.0

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has made no release in over eight years: seven releases occurred between July and August 2018, with zero releases in the last 12 months. This is strong evidence of abandonment despite the stable 3.0.0 version.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no updates for over eight years. This materially increases the risk that defects and compatibility issues will remain unaddressed.

Repo tooling

Composer is used as a build tool, but no security scanning tools are present. The missing scanning is a transparency and maintenance gap, though it is secondary to the much stronger abandonment evidence.

Repository archived

The repository is not marked archived, which is a positive sign, but its last push was over eight years ago. The lack of recent activity is more informative than the unarchived status.

Security policy

The repository has no security policy. For a package with no activity for over eight years, this leaves no visible process for reporting or handling vulnerabilities.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mike Bertram

Direct Dependencies

Dependency	Last Release	Score
twig/twig Version ^2.4.8	—	—
xervice/core Version ^4.0.0	—	—
symfony/finder Version ^4.1.0	—	—
xervice/kernel Version ^2.0.0	—	—
xervice/data-provider Version ^2.0.0	—	—