cnx/laravel-pgbouncer-reconnect

Licensecaution

The manifest declares a proprietary license, so the release is licensed but may restrict use in projects expecting an open-source-compatible license. No license-file mismatch is present.

Release historycaution

The package is only 40 days old with two releases, so its maintenance and release track record are still limited. The recent second release provides some evidence of active development.

Repo bus factorcaution

One contributor made all two recent commits, creating a concentrated maintenance base. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded two commits in the last three months, showing some recent activity but limited evidence of sustained maintenance.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no audit findings or untrusted execution sinks. However, all five action references are unpinned, leaving avoidable build-reproducibility risk.