nstwf/mysql-connection

Release historycaution

The package has seven releases since December 2022, but none in the last 12 months and the latest release was over a year ago. This indicates a quiet release cycle, though the package is not necessarily abandoned by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of current maintenance, despite the repository having been pushed more recently than the release history suggests.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although Dependabot provides some compensating security tooling.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous findings, triggers, or excessive top-level permissions. However, all five action references are unpinned, leaving build inputs less reproducible and increasing workflow supply-chain exposure.