The package is clearly licensed, documented, and tightly scoped to one runtime dependency. Its single-user ownership and lack of a security policy leave limited oversight; pin this version only if you can maintain the integration yourself.
42%
Total Score
33
100
75
75
The latest release was on February 14, 2024, with no releases in the last 12 months despite the package being nearly three years old. This is strong evidence of stalled maintenance.
There were no commits and no active maintainers in the last three months, reinforcing the release-history evidence of abandonment risk.
Only one registry account has publish access. The matching user-owned repository provides some continuity, but the small maintainer base increases continuity risk.
The package and repository are owned by an individual user rather than an organization, providing limited visible backing for long-term maintenance.
Composer build tooling is present, but no security-scanning tools were detected, leaving a meaningful repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
elasticsearch/elasticsearch Version ^8.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.