masmaleki/laravel-scout-elasticsearch

Dangerous workflowscaution

One workflow-run workflow uses an untrusted checkout, which creates avoidable CI supply-chain exposure even though no pull_request_target or script-injection patterns were found.

Maintainerscaution

One registry publishing account is a limited operational base, although the matching repository ownership and the project's very recent first release partly explain this.

Project backingcaution

The registry namespace and repository owner match, and the owner is an individual user. This supports ownership continuity but offers less organizational backing than a maintained organization-owned project.

Release historycaution

The package is only 147 days old and has one release, so there is not enough history to establish dependable release maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months. Because the package is new and its only release was 147 days ago, this is a meaningful but not conclusive maintenance warning.