dovstone/mosql

Lifecycle scriptscaution

A post-install-cmd script runs during installation, adding execution behavior that consumers must trust beyond ordinary dependency loading.

Release historycaution

This is a young package, 54 days old, with only one release and no established release cadence. That limits evidence of maturity, although the stable v1.0.0 version is not itself concerning.

Repo bus factorcaution

All 9 recent commits came from one contributor, so maintenance depends on a single person and has little demonstrated redundancy.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though not evidence of a vulnerability itself.