humanmade/ludicrousdb

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The recent release provides some compensating evidence, but the short-term development pause still lowers maintenance confidence.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool was detected. This is a transparency and hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings or untrusted-checkout sinks, but all 3 action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions remain a supply-chain hygiene concern.