saraf/qb

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern for a library expected to evolve with its ecosystem.

Repo package mentioncaution

The linked repository name does not match saraf/qb and its README does not mention the package, so the repository may not clearly belong to this release despite the organization backing.

Repo popularitycaution

The repository has 5 stars, 6 forks, and no watchers. This small public footprint limits supporting evidence of maturity, though popularity is not decisive for a stable niche package.

Security policycaution

The repository has no SECURITY.md or other security policy, leaving vulnerability reporting and response expectations unclear for a database-facing library.

Workflow auditcaution

All workflows were analyzed and use read-only permissions, with no dangerous triggers or audit findings. However, both action references are unpinned, leaving the workflow exposed to dependency changes over time.