rector/rector-doctrine

Release historycaution

The package has 57 releases, but none in the last three years, with the latest registry release on September 9, 2023. Recent repository activity partly offsets the stale published release cadence, but not fully.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and assurance gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

All 12 analyzed action references are unpinned, reducing build reproducibility and increasing exposure to changed upstream actions. The repository has one pull_request_target workflow, but no untrusted checkout or script-injection sink was detected, so this remains a hygiene concern.