oro/doctrine-extensions

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is a genuine short-term maintenance concern; recent releases, merged pull requests, and the recent repository push provide partial compensation.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured, leaving a security-process gap even though this is not evidence of malicious behavior.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.

Token permissionscaution

The CI workflow has no top-level permissions declaration. It does not request top-level write access, but the missing explicit policy leaves token privileges less constrained and transparent than recommended.