prsw/ext-sqlx

Release historycaution

All three releases appeared within minutes on the first release day, with no later releases across nearly four months. That short, burst-only history provides little evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the past three months, despite being only about four months old. This raises abandonment risk for a young extension.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear for an extension that handles database access. No provided signal compensates for that transparency gap.

Workflow auditcaution

All three analyzed action references are unpinned, and the release workflow grants top-level write permissions. The high-confidence template-injection findings are hygiene concerns here because no pull_request_target or workflow_run trigger was reported.