nettrine/orm

Release historycaution

The project has existed for over 8 years with 21 releases, but only one release in the last 12 months. That suggests slower maintenance, though the latest release is recent and documented.

Repo bus factorcaution

All recent commits came from one contributor, creating a concentrated maintenance risk. Organization ownership provides some capacity for handoff, but no second recent contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, indicating limited recent development activity. The recent repository push and release provide some compensating evidence.

Repo toolingcaution

The repository uses Composer and Make, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Workflow auditcaution

All seven analyzed action references are unpinned, and the audit found a high-confidence medium-severity secrets-inherit issue in the coverage workflow. The workflows have no untrusted triggers or script-injection findings, which limits the risk.