bizcommerce/event-observer

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning against taking a new dependency on it.

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during dependency installation. This adds execution surface for consumers, though the signal provides no evidence that the script is harmful.

Release historycaution

This is the only release, published in August 2022, with no releases in the last 12 months. The lack of release history indicates a largely inactive package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long period without a release. This raises abandonment risk.

Security policycaution

The linked repository has no security policy. That weakens vulnerability-reporting transparency, although it is secondary to the package's abandonment status.