prooph/event-sourcing
The library is licensed, documented, and backed by a matching organization-owned repository with tests and release notes. Its small dependency surface and absence of install scripts reduce adoption friction, but they do not offset the maintenance risk.
38%
Total Score
50
100
83
75
Health Score Breakdown
The package has 25 releases over roughly 12 years, but there have been no releases in about 5 years. That long release gap is a substantial abandonment concern for a library dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history showing no release activity since March 2021. This materially raises the risk that defects and compatibility issues will go unanswered.
The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a secondary transparency gap alongside the stronger maintenance concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alexander Miertsch |
| Sascha-Oliver Prolic |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 prooph/event-store Version ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.