neos/eventstore

Repo bus factorcaution

All five recent commits came from one contributor, leaving maintenance dependent on a single active developer. Organization backing provides some handoff capacity but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a standalone adoption blocker.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.