hyperf/database-sqlite

Repo commit activitycaution

The repository recorded no commits and had no active maintainers in the three months before collection. Recent registry releases partly compensate, but the absence of recent source activity raises maintenance risk.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. This is a modest transparency and assurance gap rather than evidence of unsafe code.

Workflow auditcaution

Both workflows were analyzed successfully and no audit findings or untrusted checkouts were reported. However, both actions are unpinned, leaving their exact revisions mutable; the pull_request_target trigger is not concerning here because no dangerous sink was found.