keboola/event-schema

Release historycaution

The package has had four releases since June 2022 and none in the last 12 months; its latest registry release was October 12, 2023. Recent repository activity partly offsets the long release gap, but registry maintenance is still slow.

Repo commit activitycaution

Only one commit from one active maintainer was recorded in the last three months. The recent push and merged pull request show activity, but the cadence remains thin.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling was detected. For this small schema package, the missing scanner is a hygiene limitation rather than a severe dependency risk.

Security policycaution

The repository has no published security policy, leaving reporting and response expectations undocumented.

Workflow auditcaution

The single workflow has no dangerous triggers, untrusted checkouts, or audit findings, but both of its two action references are unpinned. The audit completed fully, so this is a contained workflow-hygiene concern.