stemble/laravel-doctrine-factory

Repo popularitycaution

The repository has only 2 stars and 2 forks, indicating limited adoption evidence; popularity is supporting evidence, so this modestly lowers confidence in maturity without outweighing active maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is reported, leaving a minor transparency and maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting expectations are less clear for consumers and maintainers.

Workflow auditcaution

The workflow audit completed fully with no untrusted checkouts, script injection, dangerous triggers, or findings, and it avoids top-level write permissions. However, all 3 of 3 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.