thewunder/corma-dbal

Project backingcaution

The registry namespace and repository owner match, so the source ownership is consistent; the owner is an individual rather than an organization, providing limited visible backing.

Release historycaution

This is the only release, published over two years ago, with no releases in the last 12 months. That leaves little evidence of ongoing release maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Together with the single old release, this raises maintenance and abandonment concerns.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of adoption signals provides no additional confidence for a one-release package.

Workflow auditcaution

All seven workflows were analyzed without audit findings or untrusted checkouts, and none grants top-level write access. However, all 53 analyzed action references are unpinned, leaving the workflow dependencies exposed to upstream changes.