chamber-orchestra/doctrine-extensions-bundle

Repo bus factorcaution

One contributor made 80% of the five recent commits, creating some concentration risk. Organization ownership and a second active contributor partly compensate for that exposure.

Security policycaution

The repository has no security policy. This is a transparency and reporting gap, though the available tooling signal shows Dependabot is enabled.

Workflow auditcaution

All four analyzed action references are unpinned, reducing build reproducibility, and one workflow grants top-level write access. No untrusted checkout, injection, or high-severity audit findings were reported, so this is a hygiene concern rather than a severe risk.