shyim/opensearch-php-dsl

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of unsafe behavior on its own.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear. This is a genuine but limited transparency gap.

Workflow auditcaution

The single workflow was fully analyzed with no detected dangerous triggers, sinks, or audit findings, but all seven action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene, so this signal is cautionary.