hostnet/database-test-lib

Release historycaution

The package has 13 releases over more than 10 years, but no releases in the last 12 months; the latest release was about 19 months ago. This indicates slowing maintenance, although the long history shows the package is established.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with the absence of releases in the last 12 months, this is meaningful evidence of limited current maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than evidence that the package is unsafe by itself.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though it is less serious for a small development-only testing library than for a security-sensitive runtime component.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 3 action references are unpinned. Pinning actions would improve build reproducibility and supply-chain hygiene.