ik-oss/doctrine-dynamic-discriminator-map

Release historycaution

This is the first release and it was published today, so there is not enough history to demonstrate a sustained release cadence. That is uncertainty for a new package rather than evidence of abandonment.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, but the package and repository were created today, making this measure unavailable for proving ongoing maintenance rather than a strong abandonment signal.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency gap, not evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a maintenance and transparency gap, but it is not severe for a newly published small package.

Workflow auditcaution

The single workflow was fully analyzed and has no untrusted checkout or script-injection findings, but all eight action references are unpinned. The low-confidence cache-poisoning finding is hygiene evidence only and does not independently establish a serious risk.