tflori/orm

Project backingcaution

The registry namespace and repository are owned by the same individual user, confirming package ownership but providing no organizational maintenance backing.

Repo bus factorcaution

One contributor made all 8 commits in the last 3 months, giving the project a single-person bus factor. The repository is user-owned rather than organization-owned, so there is no provided backing evidence to offset that concentration.

Repo commit activitycaution

The repository recorded 8 commits in the last 3 months, showing ongoing activity. However, all recent activity came from one maintainer, so maintenance resilience is limited.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning coverage is a modest transparency and maintenance concern.

Security policycaution

The repository has no security policy. For a database-oriented ORM, that leaves vulnerability reporting and response expectations undocumented.