bedita/elastic-search

Dependency profilecaution

Six runtime dependencies, including CakePHP and Elasticsearch components, create a meaningful dependency surface for consumers, though the profile is not unusually large for this plugin.

Release historycaution

The package has existed for about 3 years and the latest release was published recently, but only one release appeared in the last 12 months, indicating a slow release cadence.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. The recent release and merged pull request provide some counterevidence, but the current maintenance signal is weak.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for a package that integrates with external search services.

Workflow auditcaution

Both workflows were analyzed successfully and the pull_request_target trigger has no untrusted checkout or script-injection sink. However, all eight action references are unpinned, and the auditor reported low-confidence unpinned container-image findings, creating build-reproducibility and workflow-hygiene concerns.