Infrastructure and testing helpers for creating CQRS and event sourced applications.
61%
Total Score
caution
Usable with caveats: no recent commits and all workflow actions are unpinned.
Composer post-install and post-update scripts run during dependency operations. These add installation complexity and should be understood before adoption, although this signal alone does not show malicious behavior.
There are 27 releases in the last 12 months, but they were published on the same day and the package is only 248 days old. This shows an initial release burst rather than an established cadence.
The repository recorded zero commits and zero active maintainers in the last 3 months. For a young maintained fork, that is a meaningful warning about currently demonstrated maintenance capacity.
There were no new or merged pull requests and no new or closed issues in the last month. This is limited evidence because the repository is young and its open-issue count is unknown.
The repository has no security policy. This is a transparency gap for a library intended for application infrastructure, though it is not evidence of an unsafe release by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
beberlei/assert Version ^3.3.3 | — | — |
broadway/uuid-generator Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.