kynetcode/wpzylos-database

Project backingcaution

The repository is owned by a user account rather than an organization, so the single registry maintainer represents a genuinely thin ownership base rather than ordinary organization publishing hygiene.

Release historycaution

This is the only release, published about 100 days ago, so there is not yet enough release history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. For a package only about 100 days old, this is a meaningful warning about current maintenance capacity.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tool was detected. The missing scanner is a hygiene limitation, not evidence that the package is unsafe or abandoned.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts, script injection, or audit findings. However, all nine action references are unpinned and one workflow has top-level write permissions, creating avoidable build-integrity and token-scope concerns.