pg-cursor

Security policycaution

No repository security policy was found, reducing disclosure transparency somewhat, although the active project and automated dependency scanning provide compensating maintenance evidence.

Type declarationscaution

No type declarations are included, which is a minor integration gap for consumers using TypeScript, but it does not indicate abandonment or an unsafe release.

Workflow auditcaution

Both workflows use read-only permissions and produced no audit findings, but all 9 action references are unpinned; this is a modest reproducibility and update-integrity concern.