mnemesong/orm-core

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement specified; this is a severe adoption and continuity risk.

Release historydanger

The package has had no releases in roughly four years, despite 11 releases during its short initial publishing period, indicating prolonged abandonment.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and offering no evidence of current maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented; the lack of active maintenance makes this gap more relevant.

Workflow auditcaution

Both workflows use read-only permissions and have no detected dangerous sinks or audit findings, but all four analyzed action references are unpinned, leaving avoidable workflow supply-chain uncertainty.