pollen/entity

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which weakens confidence in ongoing maintenance even though the registry shows a recent release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected; this is a maintenance and transparency gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and maintainer response procedures undocumented.

Token permissionscaution

All three analyzed workflows lack top-level token permissions declarations. No workflow requests top-level write access, which limits the concern but does not provide explicit least-privilege configuration.