chamber-orchestra/menu-bundle

Repo bus factorcaution

One contributor made all three recent commits, creating a concentrated maintenance risk; organization ownership provides some handoff capacity but does not remove the current concentration.

Repo commit activitycaution

Only three commits were made in the last 3 months, which is limited maintenance activity for a package releasing frequently.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package that integrates with Symfony security and web rendering.

Workflow auditcaution

Both workflows were analyzed without audit findings, but all four action references are unpinned and one workflow grants top-level write access; the read-only workflow partly compensates, keeping this a hygiene concern rather than a severe risk.