formal/orm

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance concern despite recent release and push evidence.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected, leaving a security-process gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

All 15 analyzed action references are unpinned and two workflows grant top-level write permissions, creating workflow hygiene concerns. The reported cache-poisoning issue is low confidence and is not treated as a severe risk by itself.