doclassif/elastic

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. Lifecycle execution adds some supply-chain exposure, although this signal does not show that the script performs a harmful or unusual action.

Release historycaution

The package has existed for about 3 years and contains 13 releases, but only 1 release was published in the last 12 months; this indicates slow current maintenance despite a recent latest release.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This weakens evidence of ongoing maintenance, even though a recent release was published.

Repo popularitycaution

The repository has 0 stars, 1 fork, and 1 watcher. This provides little community validation, but popularity is only supporting evidence and does not outweigh the maintenance signals.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The build setup is present, while the missing automated security checks modestly reduce transparency.