pauci/cqrs
Clear documentation, tests, release notes, and a matching source repository make the package easier to adopt. Its inactive project and weak workflow and security hygiene warrant pinning this version rather than expecting continued maintenance.
60%
Total Score
50
100
79
50
Health Score Breakdown
The package has 25 releases over more than 10 years, but none in the last 12 months and the latest release is over two years old, indicating stalled maintenance.
There were zero commits and zero active maintainers in the last three months, consistent with the broader absence of releases in the last 12 months and raising maintenance risk.
Composer build tooling is present, but no security scanning tools were detected. This weakens repository hygiene without showing that the package is unsafe to depend on.
The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.
The assessed release is not a prerelease, although the project remains below a stable major version. This is a mild maturity concern rather than a major adoption barrier.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/clock Version ^1.0 | — | — |
ramsey/uuid Version ^4.0 | — | — |
psr/container Version ^1.0 || ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.