foolz/sphinxql-query-builder

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release and longer project history provide some compensation.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, suggesting limited current interaction, but the available activity window is short and does not establish abandonment by itself.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a transparency and hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency for a database query library, though it does not by itself indicate abandonment.

Workflow auditcaution

All 17 analyzed action references are unpinned, which weakens build reproducibility. The audit also found a high-confidence template-injection pattern, but no untrusted checkout or script-injection sink was reported, so it remains a workflow hygiene concern rather than a severe standalone risk.