Event system
42%
Total Score
unhealthy
Risky: a single release has seen no maintenance or commits for nearly 10 years.
This package has only one release, published nearly 10 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk despite the package remaining available.
There were no commits and no active maintainers in the last three months. Combined with the old last push, this is strong evidence that fixes and compatibility updates are unlikely.
Only one registry account has publish access. The linked repository is user-owned rather than organization-backed, so there is little visible maintainer redundancy.
The repository has zero stars, forks, and watchers, providing no supporting evidence of an active user or contributor community. Popularity is only supporting evidence, so this remains a moderate concern rather than a verdict by itself.
Composer build tooling is present, but no security scanning tooling was detected. For a small package this is a hygiene gap, though it is less significant than the long maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.