diablomedia/doctrine1

Release historycaution

The project has released for more than 8 years and published version 4.0.6 recently, but only one release appeared in the last 12 months and the median interval is about 203 days.

Repo bus factorcaution

All four recent commits came from one contributor, so maintenance could be disrupted if that person becomes unavailable. Organization backing provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

Four commits were made in the last 3 months, showing current activity, but the pace is modest and comes from only one active maintainer.

Security policycaution

The repository has no published security policy, leaving developers without a documented process for reporting and handling vulnerabilities.

Workflow auditcaution

All three workflows were analyzed, but every action reference is unpinned; the audit also found a high-confidence unpinned container image and a bot-condition issue. One workflow grants top-level write permission, though no untrusted checkout or script injection was detected.