hyperf/elasticsearch

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, which weakens evidence of ongoing maintenance despite the recent release.

Repo popularitycaution

Seven stars and seven forks indicate a small project footprint. Popularity is supporting evidence only, so this modest reach lowers confidence in community support rather than making the package unsafe by itself.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving a repository hygiene gap.

Workflow auditcaution

Both workflows were analyzed successfully with no audit findings or dangerous untrusted checkouts, but both use actions without pinning. The pull_request_target trigger is ordinary here because no corresponding sink was detected.