initorm/database

Release historycaution

Only 3 releases have appeared across about 2 years and 9 months, with 1 release in the last 12 months. That is a sparse cadence for a library and adds maintenance uncertainty.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although it was pushed recently and the release is current, the observed short-term inactivity is a maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Workflow auditcaution

All 4 workflows use read-only permissions and the audit found no high- or medium-confidence findings, but all 12 analyzed action references are unpinned. That leaves avoidable build-reproducibility risk.