Package Health/acgfbr/elasticsearch-query-builder

acgfbr/elasticsearch-query-builder

The package is clearly licensed and documented, with repository tests and a stable 1.6 release. Its lack of commits for over a year and unpinned workflow images make ongoing maintenance and build reproducibility concerns.

Latest 1.6

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is 496 days old with seven releases, but none in the last 12 months; all releases arrived within a very short initial burst, leaving current maintenance unproven.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of recent registry releases and raising abandonment risk.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a dependency used in application code.

Workflow audit

All seven action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in the PHP code-style workflow. No untrusted checkout or script-injection path was found, which limits the concern to build hygiene rather than a severe workflow exposure.