doctrine/phpcr-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a meaningful recent maintenance pause despite the latest release.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, which reinforces the recent lack of visible development activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users are given no documented reporting or response process.

Workflow auditcaution

Both workflows were analyzed successfully, with no untrusted checkout or script-injection findings; however, all six action references are unpinned and a high-confidence finding identifies an unpinned container image, weakening build reproducibility and supply-chain hygiene.