doctrine/doctrine-bundle

Repo package mentioncaution

The repository name does not exactly match the package name and its README does not contain the full registry package identifier, which creates a transparency concern under this signal; however, the README title, source tree, and package contents clearly identify it as Doctrine Bundle.

Token permissionscaution

All eight workflows lack top-level permissions declarations, which is a workflow-hygiene gap; however, none declares top-level write access, so the available evidence does not indicate a severe permissions risk.