vortos/vortos-persistence-orm

Package scaffoldingcaution

The package contains tests and the repository reports tests, which supports project maturity. The missing README is a minor consumer-transparency gap for an ORM library, while the absent changelog is not concerning because release notes are also absent.

Release historycaution

The package has made 342 releases in 162 days, with a median interval of about 2 hours. This shows active publishing but an unusually rapid cadence that can make version selection and change review harder.

Repo bus factorcaution

One contributor made all 6 commits in the last 3 months, creating concentrated maintenance risk. The organization-owned repository provides some ability to hand maintenance off, so this is caution rather than a severe risk.

Repo toolingcaution

Composer is used as the build tool, which fits the Packagist package, but no security-scanning tools were detected. The missing scanning is a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy. This is a transparency and reporting gap, though it does not by itself indicate that the package is unsafe to depend on.