basis-company/picodata

Release historycaution

This is the package's first and only release, published 0 days ago, so there is no release track record to demonstrate sustained maintenance.

Repo commit activitycaution

The repository has no commits or active maintainers recorded over the last 3 months, but the project is newly released, so this is mainly a lack of track record rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting expectations undocumented; this is a modest transparency gap for a database client library.

Version stabilitycaution

Version 0.0.1 is an early, non-stable-major release, which indicates a higher likelihood of API or behavior changes for consumers.

Workflow auditcaution

The workflow was fully analyzed, uses read-only permissions, and has no dangerous sinks or findings. However, all 6 of 6 action references are unpinned, weakening build reproducibility and supply-chain hygiene.