patchlevel/event-sourcing-dashboard-bundle

Release historycaution

The package is only 79 days old and has three releases, with a median release interval of about 79 days; this is limited evidence of long-term stability, though releases have continued through the assessment period.

Repo bus factorcaution

All nine recent commits came from one contributor, giving the repository a concentrated bus factor. Organizational ownership provides some handoff capacity, but no second active contributor is shown in this signal.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security-scanning tools were detected; the missing automated security coverage is a modest hygiene gap.

Security policycaution

No repository security policy was found. This reduces transparency around vulnerability reporting and response expectations, although it does not by itself indicate abandonment.

Token permissionscaution

All 10 workflows lack top-level token permission declarations. Although none declares top-level write permissions, explicitly constraining workflow tokens would provide stronger CI security hygiene.