friendsofouro/geteventstore-bundle
The package is licensed and includes tests, but its published release line has been unchanged for about 10 years. The linked repository does not identify or mention this package, and recent commit activity is absent, so maintenance cannot be relied on.
35%
Total Score
50
100
50
75
Health Score Breakdown
The latest release was published about 10 years ago, with no releases in the last 12 months. That long gap is strong evidence of abandonment for a package a developer would need to maintain.
The linked repository name does not match the package name and its README does not mention the package. This raises a material concern that the repository may not actually be the package's source.
The linked repository had no commits or active maintainers in the last 3 months. Its recent push date provides little evidence of ongoing development for this package.
The repository has no published security policy. This is a transparency and maintenance gap, though it is less significant than the stale release and repository mismatch.
The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, leaving a supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Davide Bellettini |
| Nicolò Pignatelli |
| Contributors |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/framework-bundle Version ~2.1 | — | — |
dbellettini/eventstore-client Version ~0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.