pixelfederation/doctrine-resettable-em-bundle

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk; organization backing provides some handoff capacity but no second recent contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, by one active maintainer; this is limited recent activity, although the latest release shows the project is not abandoned.

Security policycaution

No repository security policy was found, leaving reporting and vulnerability-handling expectations less transparent.

Workflow auditcaution

Both workflows were analyzed with no untrusted checkout or script-injection findings and all four actions pinned. A high-confidence bot-conditions finding and one workflow with top-level write permissions are automation-hygiene concerns, but no dangerous trigger or sink is shown.