Package Health/ditscheri/eloquent-search

ditscheri/eloquent-search

The README, release notes, tests, and changelog provide useful project context. The package remains pre-1.0, has had no commits in three months, and its workflows contain high-confidence bot-condition and unpinned-image findings.

Latest 0.1.0

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers during the past three months, a meaningful warning about current maintenance capacity.

Release history

The package has existed for about 4 years 10 months and published two releases in the last 12 months, but its seven releases have a median interval of about 5 months 22 days.

Repo issue activity

Four pull requests are open, but none were merged in the past month and no new issues were recorded, indicating unresolved maintenance work despite ongoing review activity.

Version stability

Version 0.1.0 is not a prerelease, but it remains below 1.0, signaling a young API with greater compatibility and maturity risk than a stable-major release.

Workflow audit

All 11 analyzed action references are unpinned, and high-confidence findings flag spoofable bot conditions and an unpinned container image. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these are serious hygiene concerns rather than an automatic severe risk.