hyperf/db

Dependency profilecaution

Ten runtime dependencies create a meaningful dependency surface for a database library, but the dependencies are primarily within the same Hyperf ecosystem and no development dependencies are published.

Repo bus factorcaution

One contributor made 100% of the recent commits. Organization backing provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

Only 1 commit from 1 active maintainer was recorded in the last 3 months, indicating thin recent maintenance despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving repository security automation less transparent.

Workflow auditcaution

The audit analyzed both workflows completely and found no high-confidence findings or untrusted checkouts, but both action references are unpinned. The pull_request_target trigger is not dangerous by itself.