phel-lang/phel-pdo

Repo bus factorcaution

All 23 recent commits came from one contributor, leaving maintenance dependent on a single active person; organization ownership provides some backing but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest repository-hygiene gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a database-access library.

Version stabilitycaution

Version 0.4.0 is not a stable-major release, so API compatibility may still evolve, although it is not marked as a prerelease and recent prerelease share is zero.

Workflow auditcaution

Both workflows use read-only permissions and the audit completed without findings or untrusted checkouts, but all 11 action references are unpinned, weakening reproducibility and action supply-chain hygiene.