siabit/laravel-auditing-elasticsearch

Maintainerscaution

Only one account has registry publish access, which creates a narrow publishing path. The repository is organization-owned, providing some backing, but the registry still has limited observed publisher redundancy.

Release historycaution

The package has existed for 1034 days but has only four releases, with one release in the last 12 months. The latest release was published about four months before collection, so maintenance is present but limited.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the package's small release history, this raises concern about how quickly issues or compatibility changes will be handled.

Repo toolingcaution

The repository uses Composer for its build tooling, but no security scanning tool was detected. The build setup is appropriate for the package, while the missing scanning is a modest transparency gap.

Security policycaution

The repository has no security policy. For a driver that stores audit data in Elasticsearch, the absence of documented vulnerability-reporting guidance is a genuine security-maintenance gap.