A small dependency set and clear source layout make this release easy to inspect, but they do not offset the lack of a maintained path forward. Use contributte/event-dispatcher instead.
12%
Total Score
0
100
57
88
Packagist marks the entire package as abandoned and names contributte/event-dispatcher as its replacement. This is a direct warning against starting a new dependency on this package.
The latest registry release was in June 2018, with no releases in the last 12 months. That is more than eight years without a release and strongly indicates abandonment.
The repository recorded zero commits and zero active maintainers in the last three months. Together with the old release history, this shows no current maintenance activity.
The linked repository is archived, indicating that normal project maintenance has ended. Its recorded push in December 2025 does not compensate for the archived state.
The workflow audit completed fully and found no injection or high-severity findings, but all 20 action references are unpinned. That is a supply-chain hygiene caution, not the primary reason this release is unfit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/di Version ~2.4.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.