subjective-php/mongodb-helper

Release historydanger

The package has only three releases and none in the last 12 months; the latest release was published in May 2023, over three years ago. This is strong evidence of stalled maintenance for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided signal shows current development activity to compensate for this.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less severe than the lack of recent maintenance.

Workflow auditcaution

All two analyzed workflow action references are unpinned, which weakens build reproducibility and update control. The audit found no dangerous triggers, untrusted checkouts, script injection, or other reported findings, which partly compensates.