efureev/swoole-doctrine-dbal-pgsql-driver

Project backingcaution

The package and repository are owned by the same individual account, so the source appears aligned with the published package, but there is no organization backing shown.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern even though a new release was published recently.

Repo popularitycaution

The repository has only 2 stars and 1 fork, providing little independent evidence of broad adoption; this is supporting caution rather than a verdict by itself.

Security policycaution

No security policy is present in the repository, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

Both workflows were analyzed without high- or medium-confidence findings, and no untrusted checkout or script-injection paths were found. However, all 6 action references are unpinned and one workflow grants top-level write permissions, creating build-integrity and permission-hygiene concerns.