quillstack/orm

Release historycaution

The package is only 25 days old and all five releases occurred within a very short initial period, so long-term maintenance and release discipline are not yet established.

Repo bus factorcaution

One contributor made 21 of 24 recent commits, creating a concentrated maintenance risk. The second active contributor and organization backing partly offset the risk, but the project still depends heavily on one person today.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for a database-facing library.

Token permissionscaution

The only workflow lacks top-level token permissions. Although no write permissions are explicitly requested, the absence of a restrictive declaration leaves workflow privileges less clearly constrained.

Version stabilitycaution

Version v0.6.4 is not a stable major release, which signals an API that may still change and raises compatibility risk for production consumers.