phpolar/sqlite-storage

Repo commit activitydanger

There were zero commits and zero active maintainers during the last three months. For a package released less than a year ago, this is a meaningful sign that maintenance may have stopped.

Release historycaution

The package is about 293 days old with six releases, all within the last 12 months and concentrated in an initial burst. This shows publishing activity but not sustained maintenance, especially alongside the lack of recent commits.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the maintenance concerns.

Workflow auditcaution

The audit analyzed all eight workflows with no failed files or untrusted-checkout findings, but all 17 action references are unpinned and high-confidence secrets-inherit findings appear across several reusable workflows. These are meaningful supply-chain hygiene weaknesses, though not severe on their own.