ecphp/doctrine-oci8-bundle

Release historycaution

Only two releases exist, with the latest published in April 2021 and none in the last 12 months. This indicates a long-standing maintenance gap, though it is not registry-deprecated.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the old latest release, this is concrete evidence of dormant maintenance.

Security policycaution

The repository has no published security policy. This is a transparency gap, but it is less serious because the project does use Dependabot and Psalm.

Workflow auditcaution

Both workflows were analyzed without untrusted triggers or script injection, but all six action references are unpinned and the release workflow uses an archived action with high-confidence medium severity. These are workflow supply-chain hygiene concerns.