tourze/doctrine-upsert-bundle

Dependency profilecaution

The package declares 19 runtime dependencies, creating a relatively broad dependency surface for a focused Doctrine bundle. Its Symfony and Doctrine integration explains part of that breadth, so this is a moderate rather than severe concern.

Release historycaution

The package has five releases over 528 days, but only one release in the last 12 months. This suggests a slowing release cadence for a relatively young package.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The repository was pushed more recently, but the current activity gap still raises maintenance risk.

Security policycaution

No repository security policy was found. This is a transparency gap for a package that integrates with databases and application infrastructure.

Workflow auditcaution

Both workflows were analyzed successfully and had no reported audit findings or untrusted checkouts, but all four action references are unpinned. That leaves the build exposed to mutable action versions despite otherwise reasonable workflow hygiene.