matchish/laravel-scout-elasticsearch

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, indicating a meaningful maintenance slowdown despite recent repository activity elsewhere.

Security policycaution

No repository security policy was found, leaving disclosure guidance unclear; this is a modest transparency gap rather than a severe dependency risk.

Version stabilitycaution

This is a prerelease, v8.0.0-alpha.4, so its API and behavior may still change; the recent prerelease share is only 20%, which partly limits the concern.

Workflow auditcaution

All 7 analyzed action references are unpinned, and one workflow combines a workflow_run trigger with an untrusted checkout, creating avoidable build-chain exposure even though no high-severity finding was reported.