dodo-it/entity-generator

Release historycaution

The package has 21 releases over roughly 7.5 years, but none in the last 12 months; this indicates a meaningful slowdown in maintenance despite its established history.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which reinforces the concern raised by the lack of recent registry releases.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected; this is a modest transparency and maintenance gap.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 20 of 20 analyzed action references are unpinned, weakening build reproducibility and update control. The audit analyzed the only workflow successfully and found no dangerous triggers, untrusted checkouts, script injection, or other reported findings.