elasticsearch/xpack
The package includes a useful README, tests, a clear dependency profile, and no install-time scripts. Organization backing and a security policy provide some transparency, but the licensing files include an additional LGPL-2.1 license that is not covered by the declared Apache 2 license.
12%
Total Score
50
100
33
100
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement specified. Package-level deprecation is a severe warning against adopting this release.
This package has had only one release, published more than nine years ago, with no releases in the last 12 months. That indicates no ongoing release maintenance.
The repository had zero commits and zero active maintainers in the last three months, consistent with the archived project state.
The linked repository is archived, and its last push was on June 29, 2020. An archived source project is a strong abandonment risk for a dependency.
The package declares Apache 2 and includes license files, but artifact detection also found LGPL-2.1. The additional detected license does not clearly match the declaration and warrants review.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Zachary Tong |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 elasticsearch/elasticsearch Version 5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.