spatie/elasticsearch-query-builder

Security policycaution

The repository has no published security policy. This is a transparency gap, though it is partly offset by the active organization-backed project and recent releases.

Workflow auditcaution

All three workflows were analyzed without untrusted triggers or script-injection sinks, but all seven action references are unpinned and the auditor found a high-confidence unpinned container image. This is a concrete CI reproducibility and supply-chain hygiene concern.