tueen/database

Release historycaution

This is the package's first release, published less than one day ago, so there is no demonstrated release history or maintenance track record yet.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving repository security checks less transparent.

Security policycaution

The repository has no published security policy, so vulnerability reporting and response expectations are unclear.

Version stabilitycaution

The assessed version is v1.0.0-alpha.1 and all recent releases are prereleases, which signals an immature API and a higher likelihood of breaking changes.

Workflow auditcaution

The only workflow gives top-level write permissions, leaves all 5 action references unpinned, and has a high-confidence template-injection finding. No untrusted checkout or script-injection trigger was found, so this is a hygiene concern rather than a standalone severe risk.