kyzegs/doctrine-encryption-bundle

Project backingcaution

The repository is owned by a user account rather than an organization, so the concentrated contributor activity is not offset by visible organizational backing.

Release historycaution

The package is only 90 days old, but it has made three releases with a median interval of about 24 days, showing an active early cadence rather than abandonment.

Repo bus factorcaution

Two contributors are active, but one accounts for 12 of 13 commits, leaving substantial maintenance dependence on a single person.

Workflow auditcaution

All workflows were analyzed with read-only permissions and no dangerous audit findings, but all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.