wilycode/database-driver

Release historycaution

This is the package's first release, published today, so there is no release history to demonstrate sustained maintenance. Its age means the lack of history is not evidence of abandonment yet.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For this small initial package that is a modest process gap, not a severe supply-chain concern.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unspecified. This is a transparency and maintenance gap, but the package's small scope limits its immediate weight.

Version stabilitycaution

Version v0.1.0 is not a stable major release, which signals an early API and limited maturity. It is not marked as a prerelease, providing some indication that the publisher considers it usable.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-confidence audit findings. However, both referenced actions are unpinned, weakening build reproducibility and supply-chain control.