spatie/elasticsearch-search-string-parser

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The recent release provides some compensating evidence, but the short-term inactivity is still a maintenance caution.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and maintenance gap, though it is not by itself evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Token permissionscaution

Three workflows lack top-level token permissions and one workflow declares write access. Although the dangerous-workflow checks found no injection or untrusted-checkout patterns, the permissions posture is less restrictive than ideal.