plaisio/event-core

Release historycaution

The package has existed for about 6 years 10 months with 15 releases, but none in the last 12 months; the latest release was about 15 months ago. This indicates a mature but currently inactive release cadence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. The recent release history provides some evidence of past maintenance, but current activity is absent.

Repo toolingcaution

The project uses Composer and Phing, showing established build tooling, but no security-scanning tools were detected. The tooling supports reproducibility while leaving security review coverage unclear.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although it is a hygiene gap rather than evidence that the package is unsafe.

Workflow auditcaution

The single workflow is fully analyzed, uses read-only permissions, and has no untrusted checkouts or injection findings. However, all 4 action references are unpinned, so their versions can change without a package release.