simpod/clickhouse-client

Release historycaution

The package has 38 releases over about six years, but none in the last 12 months; the latest registry release was published over a year ago. Active repository commits partly offset the pause, but release availability remains a concern.

Repo bus factorcaution

One contributor made 37 of 38 recent commits, leaving maintenance highly concentrated. The second contributor provides some coverage, but not enough to remove the continuity concern.

Security policycaution

The repository has no security policy. This does not show a security defect, but it leaves vulnerability reporting and response expectations less transparent.

Version stabilitycaution

Version 0.8.3 is not a prerelease, but the package remains below 1.0, so compatibility expectations are somewhat less stable than for a mature major release.

Workflow auditcaution

All four workflows were analyzed without high-confidence findings or unsafe triggers, but all 18 action references are unpinned. The workflows also lack top-level permissions blocks, which is acceptable here, while unpinned actions weaken reproducibility and supply-chain hygiene.