jawira/doctrine-diagram-bundle

Workflow auditdanger

All 4 workflows were analyzed without file failures, but all 7 action references are unpinned and .github/workflows/install-bundle.yaml has 3 high-confidence template-injection findings that may expand attacker-controlled code.

Dependency profilecaution

The package declares 13 runtime dependencies, including Doctrine, Symfony, and several Jawira components, which increases the dependency surface but is consistent with its diagram-generation features.

Maintainerscaution

One registry account, Jawira Portugal, has publish access to the package, so publishing depends on one account.

Project backingcaution

The registry namespace and repository owner are both jawira, and the repository owner is a user account rather than an organization.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers during the last three months, so current development activity is not visible despite the recent release.