pjanisio/simpledb

The package has a clear README, tests, a matching repository, and a lightweight dependency profile. Its single release and zero commits in the last three months limit confidence in ongoing maintenance, while the workflow uses an unpinned container image and has no security policy.

Latest 2.4.36

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only one release is recorded, on June 7, 2024, with no releases in the following 12 months; this is a meaningful sign of limited maintenance activity despite the stable version.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, reinforcing the concern raised by the sparse release history.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected; this is a transparency and maintenance gap rather than evidence of unsafe behavior by itself.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unclear for a database abstraction library.

Workflow audit

All three action references are unpinned, and the audit found a high-confidence, high-severity use of a floating container image tagged latest. The workflow has no untrusted checkout or script-injection findings, which limits the overall impact.