xp-forge/sql

The package includes tests, a changelog, release notes, and clear usage documentation. Its organization-backed repository is not archived and the release is stable, but maintenance and workflow hygiene warrant care before adoption.

Latest v1.1.0

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 10 releases over about 9 years, but none in the last 12 months and the latest registry release was about 2.5 years ago. This indicates materially slowed maintenance despite its established history.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with the long gap in registry releases, this raises the risk that fixes or compatibility updates may be slow.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy. That weakens transparency around vulnerability reporting and response expectations.

Workflow audit

The single workflow was fully analyzed with no reported audit findings or untrusted-trigger sinks, but all 3 action references are unpinned. The absence of a top-level permissions block is acceptable on its own, while unpinned actions remain a supply-chain hygiene concern.