quillstack/db

Release historycaution

This is a very young package, only 25 days old, with three releases clustered within roughly 35 minutes. That shows initial activity but provides little evidence of long-term maintenance.

Repo bus factorcaution

One contributor made 18 of 21 recent commits, creating concentration risk. The second active contributor and organization ownership provide some handoff capacity, so this is a caution rather than a severe risk.

Repo popularitycaution

The repository has zero stars, forks, and watchers. For a package only 25 days old this is weak supporting evidence, but popularity alone does not establish poor health.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and disclosure handling unclear. Security scanning tools provide some compensation but do not replace a policy.

Token permissionscaution

The sole workflow lacks top-level token permissions, so its required access is not explicitly minimized. No top-level write permissions were found, limiting the severity of this hygiene gap.