iamcal/sql-parser

Repo bus factorcaution

Two contributors are active, which provides some continuity, but one contributor made 75% of recent commits, leaving maintenance somewhat concentrated.

Repo toolingcaution

The repository uses Make and Composer, providing basic build tooling, but no security-scanning tool was detected.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities should be reported and handled.

Version stabilitycaution

The assessed v0.7 release is not marked prerelease, although the package has not reached a stable major version. That is a modest maturity limitation rather than a severe concern.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, which leaves avoidable update and provenance risk.