denisyu-1/articulate

Registry deprecationdanger

Packagist marks the package abandoned at package scope and points to https://github.com/articulate-orm/core, so this specific dependency should not be the basis for new work despite the active replacement repository.

Security policycaution

No repository security policy was found, leaving a transparency gap for reporting and handling vulnerabilities in a database library.

Token permissionscaution

Both analyzed workflows declare top-level write permissions. This increases CI credential exposure compared with read-only defaults, although the separate workflow-risk checks found no dangerous trigger or script-injection patterns.