friendsofcat/opensearch-scout-driver-plus

Release historycaution

The package has had no registry release in about three years, despite four releases overall; this is meaningful evidence of reduced maintenance activity.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the roughly three-year release gap and increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance weakness.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 11 analyzed action references are unpinned, which weakens build reproducibility. The reported cache-poisoning findings are low-confidence hygiene observations, and the audit completed without untrusted checkouts or script injection.