phly/phly-event-dispatcher

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which is a maintenance concern, although the repository push and same-day release provide compensating evidence that activity has not ceased entirely.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and supply-chain hygiene gap.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented.

Token permissionscaution

The single workflow lacks top-level token permissions, so its GitHub Actions privileges are not explicitly minimized; no top-level write permissions were detected, limiting the severity of this gap.