windwalker/orm

Repo bus factorcaution

One contributor made all two recent commits, creating a narrow recent maintenance base. Organization backing provides some handoff capacity but does not remove the observed concentration.

Repo commit activitycaution

Only two commits were recorded in the last three months, which is limited activity for a maintained library and lowers confidence in ongoing responsiveness.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance-process gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all five action references are unpinned, which creates a modest reproducibility and workflow supply-chain hygiene gap.