domainflow/event-sourcing-mongodb

Release historycaution

This package is 31 days old and has only one release, so there is little evidence yet of sustained maintenance or release stability.

Repo bus factorcaution

All three commits in the last three months came from one contributor, creating concentrated maintenance risk; the organization-owned repository provides some capacity to hand off work.

Security policycaution

No security policy is present in the repository, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version v0.1.0 is an early non-stable-major release, which indicates a higher likelihood of API or behavior changes for adopters.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or high-severity issues. However, all 25 action references are unpinned, which weakens build reproducibility and supply-chain integrity.