udan11/sql-parser

Registry deprecationdanger

Packagist marks the package abandoned at package scope, although the stated replacement is the same package and the linked repository remains active. This is a meaningful registry-maintenance warning but not evidence that the source project is abandoned.

Release historycaution

The project has 93 releases since September 2015, but only one release in the last 12 months. Recent repository activity partly offsets the slower registry cadence.

Workflow auditcaution

All 20 analyzed action references are unpinned, which weakens build reproducibility. The audit also found two high-confidence template-injection findings; no untrusted checkout or script-injection trigger was reported, so these remain workflow-hygiene concerns rather than a standalone severe verdict.