Package Health

dbellettini/geteventstore

The linked project is active, but all recent commits come from one contributor and the repository does not clearly identify this package. Its tiny release history and old pre-1.0 version add uncertainty for long-term use.

Latest v0.1.0PackagistPackagist

15%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

50

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

The package is explicitly abandoned at the registry and has a package-wide replacement, friendsofouro/geteventstore; this is a direct reason not to adopt this release.

Release historydanger

There has been only one release, published over 10 years ago, with no releases in the last 12 months. The replacement project may be active, but this package itself is not maintained through releases.

Repo bus factorcaution

One contributor made all 12 recent commits, leaving no demonstrated contributor redundancy. The organization-owned project provides some backing, but the observed maintenance capacity remains concentrated.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, so the linkage is not clearly established. That creates a transparency concern even though name differences can occur in reorganized projects.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security scanning tools were detected. This is a modest transparency gap, not a standalone reason to reject the package.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Nicolò Pignatelli
Davide Bellettini
Contributors

Direct Dependencies

DependencyLast ReleaseScore
doctrine/cache
Version ~1.4
guzzlehttp/guzzle
Version ~6.0
dbellettini/eventstore-client
Version ~0.8
kevinrob/guzzle-cache-middleware
Version ^0.7.1

Weekly Downloads

Info

Last Published
10 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform