prooph/event-store
The repository provides tests, release notes, a README, and an organization-backed project with a clear BSD-3-Clause license. Its small runtime dependency set and lack of install scripts reduce adoption friction, but ongoing maintenance remains the main concern.
57%
Total Score
75
100
88
75
Health Score Breakdown
The package has a long history and 83 releases, but it has made no release in the last 12 months; the latest release is more than a year old. This materially raises maintenance and abandonment concerns.
The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful sign of currently limited maintenance capacity, despite the repository not being archived.
No security policy was found in the repository. That weakens vulnerability-reporting transparency, although it is a process gap rather than evidence that the package is unsafe.
The assessed v8.0.0-RC-1 is a prerelease while the latest stable version is v7.12.3. Depending on a release candidate increases compatibility risk compared with the stable line.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sascha-Oliver Prolic |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version ^3.7.3 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.