shopware/dbal-nested-set

Release historycaution

The package has had no release in more than five years and none in the last 12 months, despite a stable eight-release history. This is a meaningful maintenance concern for a library dependency.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the old registry release, this indicates limited current maintenance activity.

Security policycaution

The repository has no published security policy, leaving no documented channel or process for handling vulnerabilities in a database library.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers or audit findings, but all four action references are unpinned. The absence of a top-level permissions block is acceptable here; unpinned actions remain a modest reproducibility and supply-chain hygiene gap.