phpolar/mysql-storage

Workflow hygiene is imperfect, with unpinned actions and inherited secrets increasing maintenance risk. The package is otherwise clearly structured, licensed, tested in the repository, and backed by security tooling.

Latest 1.0.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

Six releases were published within the last 12 months, but all occurred between December 1 and December 19, 2025, showing an initially active burst rather than sustained release activity.

Repo commit activity

There were no commits and no active maintainers in the last three months, a meaningful maintenance concern for a package intended to be depended on.

Repo issue activity

There are no new or closed issues in the last month and two open pull requests, suggesting limited recent community activity but not clear abandonment by itself.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this modestly reduces maturity evidence but does not determine the verdict.

Workflow audit

All eight workflows were analyzed, but all 17 action references are unpinned, one high-confidence finding uses a floating container image tag, and several workflows inherit secrets. No untrusted checkout or script-injection sink was found, so this is a hygiene and maintenance caution rather than a standalone severe risk.