neuron-php/events

Repo commit activitycaution

There were no commits and no active maintainers during the last 3 months, which is a meaningful maintenance warning; the recent release and push show activity but do not establish sustained development.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no community validation. This is supporting evidence only and does not outweigh the package's release history and organizational backing.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing security automation is a repository-hygiene gap, though it is not by itself evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Token permissionscaution

The CI workflow does not declare top-level token permissions. No write permissions were observed, but explicit least-privilege declarations would provide stronger workflow security hygiene.