tugmaks/doctrine-walkers

Project backingcaution

The registry namespace and repository are owned by the same individual user, so the single-contributor concentration is not offset by organization backing.

Repo bus factorcaution

All 2 recent commits came from one contributor, so maintenance depends heavily on a single individual and has limited handoff resilience.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear; the available Dependabot and Psalm tooling partly compensates for this transparency gap.

Workflow auditcaution

All 5 workflows were analyzed with no detected dangerous sinks or audit findings, but all 16 action references are unpinned, weakening CI build reproducibility.