difra/lib-events

Release historydanger

The package has only one release, published about four years and seven months ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, though the package may be intentionally stable.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history's prolonged inactivity. No provided signal shows current maintenance capacity.

Package scaffoldingcaution

The artifact has no README, tests, or changelog, and the repository also reports no tests or changelog. For this small five-file library, the missing consumer documentation and validation are meaningful transparency gaps.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are reported. That weakens supply-chain maintenance assurance, especially alongside the lack of recent activity.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a moderate governance gap, not evidence that the package is unsafe.