lingoda/domain-events

Dependency profilecaution

Ten runtime dependencies, including Doctrine and Symfony components, make this a meaningful integration surface rather than a minimal package. The profile is reasonable for a Symfony domain-events bundle but adds upgrade coordination.

Repo popularitycaution

The repository has 8 stars and 3 forks, indicating a small user base. Popularity is supporting evidence only, so this is a minor maturity caution rather than a decisive concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanning automation is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This does not show unsafe code, but it leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings, dangerous triggers, or untrusted checkouts. However, all 3 action references are unpinned, leaving avoidable build reproducibility and workflow supply-chain risk.