joke-php/db-sql

Release historycaution

The package is only 34 days old with three releases, but releases have continued at roughly 17-day intervals, showing active early maintenance rather than abandonment.

Repo bus factorcaution

All 52 recent commits came from one contributor, creating a meaningful continuity risk; organization ownership provides some handoff capacity but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and disclosure expectations less clear for a database integration package.

Workflow auditcaution

The workflow uses read-only permissions and has no dangerous audit findings, but both analyzed action references are unpinned, leaving avoidable workflow reproducibility and supply-chain hygiene risk.