sonata-project/doctrine-orm-admin-bundle

Dangerous workflowscaution

One of eight workflows uses pull_request_target, which can be security-sensitive. No untrusted checkouts or script-injection patterns were detected, limiting the concern to a contained workflow risk.

Dependency profilecaution

The package has 19 runtime dependencies, including core Symfony, Doctrine, and Sonata components. This is a substantial integration surface, but it is coherent with an admin bundle rather than an unexplained or unusually broad dependency set.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Although the package released recently and was pushed about 4 months ago, the current quiet period is a meaningful maintenance concern.

Repo issue activitycaution

There are only four open issues and one open pull request, with no issues or pull requests opened or closed in the last month. This is not evidence of abandonment by itself, but it provides little indication of active support right now.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security scanning tools were detected. Established build tooling helps reproducibility, while the missing scanning automation is a modest transparency and maintenance gap.