react/mysql

The workflow has no audit findings, but its three action references are unpinned and the repository has no security policy. Strong documentation, tests in the repository, a clear MIT license, and organization backing provide useful maintenance context.

Latest v0.6.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in November 2023, nearly three years before collection, with no releases in the last 12 months. This is a meaningful maintenance concern despite 17 releases over the package's long history.

Repo commit activity

There were no commits and no active maintainers in the three months before collection. The recent repository push provides some compensating evidence, but the current activity gap still raises abandonment concern.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while 15 issues and 7 pull requests remain open. This indicates limited current project activity.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This lowers transparency for a database client but is not severe on its own.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
react/socket Version ^1.12	—	—
react/promise Version ^3 \|\| ^2.7	—	—
react/event-loop Version ^1.2	—	—
evenement/evenement Version ^3.0 \|\| ^2.1 \|\| ^1.1	—	—
react/promise-timer Version ^1.9	—	—