cycle/orm

Recent releases and a documented release note make this easier to maintain and integrate. Recent work is concentrated in one contributor, and all 13 workflow action references are unpinned, limiting the margin of safety.

Latest v2.18.0

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor produced 100% of the four commits in the last three months. Organization backing provides some handoff capacity, but the observed recent contributor base remains narrow.

Repo commit activity

Only four commits were recorded in the last three months, all from one active maintainer. Releases continue, but recent source activity is thin and concentrated.

Repo issue activity

The repository has 81 open issues, with one issue closed in the last month and no new pull requests or merged pull requests in that period. This is a mild sign of limited recent public activity, though release history is strong.

Security policy

No repository security policy was found. That is a transparency and disclosure-process gap for a mature library, though the repository does use Psalm and shows no direct security failure here.

Workflow audit

All six workflows were analyzed without failed files, dangerous triggers, untrusted checkouts, or audit findings, and no workflow has top-level write permissions. However, all 13 action references are unpinned, leaving dependency updates exposed to upstream changes.