webgriffe/sylius-elasticsearch-plugin

Dependency profilecaution

The package has five runtime dependencies, including Sylius and Elasticsearch, so adoption carries meaningful ecosystem coupling but not an unusually broad runtime surface.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a concrete sign that maintenance may be slowing despite the recent release.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, which reinforces the recent lack of visible maintenance activity.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All eight analyzed action references are unpinned, weakening build reproducibility. The cache-poisoning findings are low-confidence hygiene warnings, so they add limited weight, while the audit itself was complete.