coolms/rql

Release historycaution

This is a young package, released once 35 days ago, so long-term maintenance and release consistency are not yet established.

Repo bus factorcaution

Two contributors are active, but one accounts for about 81% of recent commits, leaving continuity dependent on a narrow contributor base.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is configured, leaving a modest repository hygiene gap.

Security policycaution

No security policy is present, reducing transparency about vulnerability reporting and response procedures.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions, with no dangerous triggers or audit findings. However, all five action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.