phpro/dbal-tools

Repo bus factorcaution

All recent commits came from one contributor, giving the project a narrow recent contributor base. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months from one active maintainer. That is thin recent development activity, even though the current release history shows continued publishing.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest transparency and maintenance gap rather than evidence of unsafe behavior.

Security policycaution

The repository has no security policy. For a database tooling library, this leaves vulnerability-reporting expectations unclear and modestly reduces project transparency.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-confidence audit findings, and it does not grant top-level write permissions. However, all 3 action references are unpinned, which leaves avoidable workflow supply-chain drift.