setono/doctrine-orm-trait

Repo bus factorcaution

One contributor made all three recent commits, so maintenance depends heavily on one person. Organization backing partly offsets the handoff risk but does not remove the concentration.

Repo commit activitycaution

Three commits landed in the last three months, which is evidence of current activity, though the volume is modest for a project with only one active maintainer.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and dependency-monitoring gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear for users.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, script injection, or high-confidence findings, but all 19 action references are unpinned. The lack of a top-level permissions block is not concerning on its own.