The package includes a clear README, release notes, and repository tests. Its single maintainer and minimal dependency set offer limited reassurance for a library that has seen no updates since 2016.
42%
Total Score
100
58
50
This is the only release, published over 10 years ago, with no releases in the last 12 months. That strongly raises abandonment risk despite the package still being undeclared as deprecated.
The repository is not formally archived, but it was last pushed in July 2016. That long period without observed repository activity materially lowers confidence in ongoing maintenance.
The linked repository has no security policy. This is a transparency and reporting gap, though it is secondary to the much stronger evidence of long-term inactivity.
Version 0.1.0 is not a stable major release, and the project never progressed beyond it. The release notes describe it as a first public release whose features may grow, reinforcing its immature status.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/event Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.