friendsofcat/opensearch-adapter

Release historycaution

The package has five releases and a short early median interval, but it has had no registry release in more than three years, indicating a real maintenance concern.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months of the assessment period, consistent with the long release gap and raising abandonment risk.

Security policycaution

The repository has no SECURITY.md policy and no security scanning tools, leaving security reporting and automated checks less transparent than they could be.

Workflow auditcaution

All 10 workflow action references are unpinned, and the auditor found low-confidence cache-poisoning patterns in three workflows. No untrusted checkout, injection sink, or broad top-level write permission was found, so this is workflow hygiene rather than a severe risk.