foleon/api-tools-doctrine

Release historycaution

Only one release exists, published about 2 years and 8 months ago, with no releases in the last 12 months. This limits evidence of continued maintenance, although it does not prove abandonment.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last 3 months. Combined with the old last release, this is the main evidence of potentially stalled maintenance.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. This is a transparency and assurance gap, not evidence that the package is unsafe.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting and response practices undocumented.

Token permissionscaution

Both analyzed workflows lack top-level token permissions declarations. No workflow requests top-level write access, which limits the concern, but explicit least-privilege settings would provide stronger supply-chain hygiene.