The repository remains active with three contributors, tests, security tooling, and an organization behind it. Releases stopped in 2020, and both workflow actions are unpinned, so this old pre-1.0 release needs extra maintenance scrutiny.
60%
Total Score
100
100
88
100
Only three releases were published, all beginning and ending on June 30, 2020, with no releases in the last 12 months. Current repository activity partly offsets the stale registry release line, but not the maintenance uncertainty for this version.
The assessed version is v0.0.3 and the latest version is still below 1.0, so the API may not be mature or stable. No recent prerelease churn is present, which is a small compensating sign.
Both workflows were analyzed successfully with no reported audit findings or untrusted checkout and script-injection sinks. However, both use references are unpinned, which weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
elasticsearch/elasticsearch Version ^6 | ^7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.