Package Health

denosyscore/events

The MIT license, focused dependency set, and matching repository make the package easy to inspect and adopt. Its very young v0 line and lack of recent commits leave long-term maintenance unproven, while workflow references are not pinned.

Latest v0.2.2PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

86

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package is 222 days old with four releases, but all four were published within roughly one hour, leaving no demonstrated release cadence after the initial extraction.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. With the latest push occurring on February 15, 2026, ongoing maintenance is not demonstrated.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is not severe enough by itself to make the release unfit.

Version stabilitycaution

Version v0.2.2 is a non-stable-major release, so the API may still change. It is not marked prerelease, which provides some compensating stability.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all four action references are unpinned, which leaves build inputs less reproducible and weakens supply-chain hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
psr/event-dispatcher
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
7 months ago
Created
7 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform