chamber-orchestra/doctrine-sort-bundle

Repo bus factorcaution

All two recent commits came from one contributor, creating a concentrated maintenance dependency. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only two commits were recorded in the last three months, indicating limited recent development activity despite the frequent registry releases. This weakens confidence in sustained maintenance.

Security policycaution

No repository security policy was found. That reduces transparency for reporting and handling vulnerabilities, though it does not by itself show the package is unsafe.

Workflow auditcaution

Both workflows were fully analyzed with no high-confidence audit findings, and one workflow uses read-only permissions. However, all four action references are unpinned and one workflow has top-level write permissions, creating modest reproducibility and token-scope concerns without an untrusted trigger or sink.