saturio/duckdb

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the past three months. Combined with the release burst, this points to stalled ongoing maintenance.

Release historycaution

All 13 releases arrived within about 10 hours, with no newer release during the package's 208-day age. That burst followed by a long pause is weak evidence of sustained maintenance.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was detected. The missing scanning is a modest transparency and maintenance gap, not proof of a security problem.

Security policycaution

The repository has no security policy, leaving no stated process for reporting or handling vulnerabilities in this native extension.

Version stabilitycaution

The release is not a stable major version, and the README explicitly describes the project as early development rather than production-ready. That limits maturity even though it is not marked prerelease.