Package Health

meritum/database

Clear documentation, tests, licensing, and frequent releases support adoption. The repository is organization-backed, but all recent commits come from one contributor and workflow actions are unpinned. No security policy adds a smaller transparency gap.

Latest 1.4.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Repo bus factorcaution

One contributor holds all recent commits, creating a meaningful continuity risk; organization ownership provides some capacity for handoff but does not demonstrate a second active maintainer.

Repo commit activitycaution

Eight commits in the last three months show ongoing work, but all activity came from one active maintainer, limiting demonstrated maintenance depth.

Security policycaution

The repository has no published security policy. This is a transparency gap for a database library, although it is not evidence of a security defect.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both action references are unpinned, leaving avoidable CI supply-chain drift.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mike Georgeff

Direct Dependencies

DependencyLast ReleaseScore
georgeff/kernel
Version ^1.7
georgeff/database
Version ^1.1

Weekly Downloads

Info

Last Published
2 months ago
Created
3 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform