gember/event-sourcing

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months, which is a meaningful maintenance concern, although recent releases and nine merged pull requests provide partial compensation.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version 0.18.0 is not a stable major release, so adopters should expect some API evolution; it is not a prerelease and recent prerelease share is zero.

Workflow auditcaution

The audit analyzed both workflows with no high-confidence findings or untrusted checkout/script-injection paths, but all four action references are unpinned and one workflow has top-level write permissions, creating workflow hygiene and least-privilege concerns.