68publishers/event-dispatcher-extra

Release historycaution

The package has six releases over roughly five and a half years, but has made no release in the last 12 months; that slows confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the broader absence of releases in the last year and raising abandonment concern.

Repo toolingcaution

The repository uses Make and Composer for build tasks, but no security-scanning tools are reported, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerability reports should be handled.

Workflow auditcaution

All three workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all eight action references are unpinned, which weakens build reproducibility and supply-chain hygiene.