Tests and the MIT license provide a solid baseline, and the small dependency surface limits integration complexity. Maintenance depth remains unproven, so pinning this version is preferable until a broader release and contributor history develops.
62%
Total Score
67
100
81
75
This is a young package at 96 days old with only one release, so its maintenance and compatibility track record are not yet established.
All recent commits come from one contributor. Organization backing provides some handoff potential, but no second active contributor is shown to offset the concentrated activity.
Only one commit from one active maintainer was recorded over the last three months, which provides some activity but little evidence of sustained maintenance capacity.
The repository has zero stars, forks, and watchers. This is weak supporting evidence rather than a verdict, but it offers no external adoption signal for this new package.
Composer build tooling is present, but no security-scanning tooling was detected. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/event-dispatcher Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.