portphp/doctrine

Repo bus factorcaution

All six recent commits came from one contributor, leaving maintenance dependent on a single active person despite the repository's organization ownership.

Security policycaution

The repository has no SECURITY.md or other security policy, leaving vulnerability-reporting expectations unclear.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no high-confidence findings or untrusted-code sinks. However, all three action references are unpinned, which weakens build reproducibility and supply-chain control.