somardigital/silverstripe-forager-elasticsearch
The BSD-3-Clause license is clear, and the package includes a useful README plus release notes for this breaking update. The linked repository has tests and matches the package, while the only notable hygiene gaps are an unpinned workflow action and no security policy or scanning.
79%
Total Score
100
100
86
50
Health Score Breakdown
The package has four releases over 54 days, including a release on the assessment date, showing active early development. Its short history and rapid initial release cadence provide less evidence of long-term stability.
Composer build tooling is present, but no security scanning tools were detected. This is a modest process gap, not evidence that the package is unsafe or unmaintained.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. This is a minor maturity gap alongside otherwise active project evidence.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Its one action is unpinned and the workflow lacks a top-level permissions block, so workflow reproducibility and least-privilege hygiene are mildly weaker.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Somar Digital |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 silverstripe/framework Version ^6 | — | — |
elasticsearch/elasticsearch Version ^9 | — | — |
silverstripe/silverstripe-forager Version ^2 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.