cloudevents/sdk-php
The small dependency set, automated tests, security scanning, and organization backing reduce adoption risk. Ongoing maintenance looks quiet, and all nine workflow actions are unpinned, so pinning this version deserves care.
65%
Total Score
75
100
94
75
Health Score Breakdown
The package has six releases since August 2021, but none in the last 12 months; the latest release was February 7, 2025, indicating a quiet release cadence.
There were zero commits and zero active maintainers in the last three months, which weakens evidence of current maintenance capacity.
No security policy is present in the repository, leaving vulnerability reporting expectations unclear.
Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all nine action references are unpinned, creating a workflow supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/polyfill-php80 Version ^1.26 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.