prooph/event-store-symfony-bundle

Release historycaution

The package has 17 releases over roughly 10 years but none in the last 12 months; its latest release was on May 28, 2024, indicating a meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which supports the broader evidence of stalled maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a transparency gap but not evidence that the package is unsafe.

Version stabilitycaution

Version 0.11.2 is not on a stable major version, although it is not marked as a prerelease and recent prerelease usage is zero.

Workflow auditcaution

All 6 of 6 analyzed action references are unpinned, reducing build reproducibility. The audit found no untrusted checkouts, script injection, elevated top-level writes, or other reported findings.