kislayphp/eventbus

Repo bus factorcaution

All three recent commits came from one contributor, giving the project a concentrated maintenance base. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

The repository received three commits in the last three months, showing ongoing activity, though the volume is modest for a maintained extension.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning reduces maintenance and vulnerability-monitoring transparency.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 9 action references are unpinned and one workflow grants top-level write permissions, creating build-integrity and permission-hygiene concerns.