fengdangxing/elasticsearch-dsl
The repository is very small and has no tests or security scanning, limiting confidence in long-term maintenance. Its Apache-2.0 license, working README, and lack of deprecation or install scripts provide some useful positives.
40%
Total Score
25
69
75
Health Score Breakdown
The package has had no release in over three years; its 30 releases were clustered on March 21, 2023, indicating abandonment risk despite the initial release activity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having stopped evolving after March 2023.
Only one registry account can publish releases. The linked repository is user-owned rather than organization-backed, so there is little visible maintainer redundancy.
The artifact and repository each contain only 13 files, including a small set of source files and documentation. This is not inherently unsafe, but it leaves little evidence of a mature project.
A README is present, which helps consumers, and missing tests or a changelog in the published artifact is normal packaging practice. However, the repository also reports no tests and no changelog, reducing maintenance transparency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 fengdangxing |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ongr/elasticsearch-dsl Version ^7.2 | — | — |
elasticsearch/elasticsearch Version ^7.15 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.