ipl/orm

Repo bus factorcaution

One contributor made 14 of 17 recent commits, creating concentration risk; the three other active contributors and organization backing provide some ability to hand off maintenance.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected, leaving automated vulnerability coverage unclear.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.

Token permissionscaution

The workflow has no top-level token permissions declaration. No write permissions were observed, but explicitly restricting permissions would provide stronger workflow hygiene.

Version stabilitycaution

Version 0.9.0 is not a stable-major release, so API compatibility may still require care, but it is not a prerelease and recent releases show stable versioning behavior.