kelvinmo/f3-event-dispatcher
The source repository has tests and a changelog, and its workflows had no detected dangerous findings. All eight actions are unpinned, and no security policy is published.
66%
Total Score
75
100
94
75
Health Score Breakdown
The package has had no release in the last 12 months, and its latest registry release was about 19 months ago. This lowers confidence in ongoing maintenance, although the repository was pushed more recently.
There were no commits and no active maintainers in the most recent 3 months. This is a meaningful maintenance concern, although the repository had a push about 8 months before assessment.
The repository has no security policy. That is a transparency and disclosure gap, but it is a moderate concern rather than evidence that the release is unfit.
All three workflows were analyzed successfully, with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 8 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kelvin Mo |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 bcosca/fatfree-core Version ^3.5 | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.