refugis/elastica-odm

Release historydanger

Only two releases exist, with no releases in the last 12 months; the latest release is about six years old. This is strong evidence of limited maintenance and raises abandonment risk.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with no releases in roughly six years, this materially increases the risk that the published beta is not actively maintained.

Dangerous workflowscaution

Both analyzed workflows use pull_request_target, which can increase CI exposure when handling untrusted pull requests. No untrusted checkout or script-injection patterns were detected, partially limiting the concern.

Dependency profilecaution

The package declares ten runtime dependencies for a document-management library, including several older framework and integration components. This adds compatibility and maintenance surface, but the signal does not show an excessive or obviously unsafe dependency profile on its own.

Repo popularitycaution

The repository has only two stars and no forks, indicating limited external adoption or review. Popularity is supporting evidence rather than a verdict, but it provides little community reassurance here.