spaze/mysql-session-handler

Project backingcaution

The package and repository are owned by the same individual account, rather than an organization. This is consistent ownership, but it indicates a relatively narrow backing structure.

Release historycaution

The project has existed since March 2019 with 19 releases, but only one release in the last 12 months; the latest release was in November 2025. This supports maturity while indicating a slower current cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Although the recent release shows some activity, the current pause lowers confidence in ongoing maintenance.

Security policycaution

The repository has no security policy. For a session-storage library, this is a transparency gap, though it is not by itself evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed and has no detected injection sinks or high-severity findings, but both of its action references are unpinned. That leaves avoidable update and provenance risk.