betalabs/elasticsearch

Release historydanger

The package has 93 releases, but its latest release was over five years ago and it has had no releases in the last 12 months. That strongly indicates the release line is no longer maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, matching the long release gap and providing no evidence of ongoing maintenance.

Licensecaution

The artifact and repository contain license files, but the artifact identifies both Apache-2.0 and LGPL-2.1 while the manifest declares only Apache-2.0. The files provide transparency, but the declaration mismatch warrants checking before adoption.

Security policycaution

The linked repository has no security policy, reducing transparency about how vulnerabilities are reported and handled. The repository's other documentation does not compensate for this specific gap.

Workflow auditcaution

All three workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, or audit findings, but all six referenced actions are unpinned. This is a supply-chain hygiene gap without evidence of an active exploit path.