hyperf/database-sqlserver

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance for a package with only one release.

Release historycaution

This package is about six months old but has only one release, so there is little observed release history from which to judge maintenance continuity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Version stabilitycaution

The assessed version is a prerelease, and all recent releases are prereleases, so compatibility and API stability are less established than for a stable release.

Workflow auditcaution

Both workflows were analyzed without high- or medium-severity findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, both action references are unpinned, leaving a smaller reproducibility and workflow-integrity concern.