magiclegacy/search-client

Release historydanger

This is the package's only release, published over four years ago, with no releases in the last 12 months. That strongly raises abandonment risk despite the release being stable.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of ongoing maintenance.

Repo popularitycaution

The repository has zero stars and forks and one watcher, so there is little visible community validation. Popularity is supporting evidence only and does not outweigh the stronger maintenance signals.

Security policycaution

No repository security policy was found. This is a transparency gap, though it is less serious for a small client library than the absence of maintenance activity.

Workflow auditcaution

The workflow audit completed fully and found no untrusted checkout or script injection, but all three action references are unpinned and one high-confidence medium-severity archived action was detected. This weakens CI supply-chain hygiene.