intaro/hstore-extension

Release historycaution

The package has six releases over more than 11 years, with no release in the last 12 months and a median interval of about 624 days, indicating slow maintenance but not abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent repository push partly offsets this, but the lack of current development still lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a transparency and hygiene gap rather than evidence of an unsafe release.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package that integrates with database and framework code.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous findings, but all four action references are unpinned. That leaves avoidable workflow supply-chain drift risk.