directorytree/opensearch-scout-driver

Release historycaution

The package is only 85 days old and has two releases, with the latest released 15 days after the first. This shows early activity but provides limited evidence of long-term maintenance maturity.

Repo bus factorcaution

All 38 recent commits came from one contributor, creating a real continuity risk. Organization ownership provides some capacity to hand off maintenance, but no second active contributor is evidenced.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a dependency that integrates with search infrastructure.

Token permissionscaution

One workflow lacks top-level permissions and another declares write permissions, so CI token access is not consistently minimized. This increases repository maintenance risk, although no dangerous workflow pattern was detected.