byjg/micro-orm

Repo bus factorcaution

All 2 recent commits came from one contributor, creating a concentrated maintenance path despite the repository remaining active.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, so activity is present but relatively light for a maintained library.

Workflow auditcaution

The single workflow is fully analyzed with no audit findings and scopes permissions at job level, but all 4 action references are unpinned, leaving avoidable supply-chain drift risk.