oat-sa/lib-tao-elasticsearch

Package scaffoldingdanger

The README explicitly says the library must not be used anymore, and the release notes direct users to extension-tao-advanced-search. Tests and a changelog are present, but they do not offset this release-specific abandonment warning.

Release historydanger

The package has had no releases in the last 12 months, despite 18 releases since 2018. This supports the explicit deprecation message and indicates no current release maintenance.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, from 1 active maintainer. This is limited current activity for a package whose own documentation says it should no longer be used.

Security policycaution

The linked repository has no security policy. This is a transparency gap, although it is secondary to the release's explicit replacement guidance.

Workflow auditcaution

The single workflow was fully analyzed with no detected audit findings or dangerous triggers, but all 3 action references are unpinned. That leaves avoidable build-integrity exposure.