heyday/silverstripe-elastica

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a recent release shows some delivery, the lack of observed development activity raises maintenance risk.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and response expectations less transparent for a dependency.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but its only action use is unpinned. The missing top-level permissions block is acceptable here because the workflow does not request top-level write access.