psr-discovery/event-dispatcher-implementations
The repository is organized, tested, licensed, and backed by an organization, with security scanning and release notes for this version. Maintenance has gone quiet since December 2024, and all 20 workflow references are unpinned, including a high-confidence unpinned container image.
62%
Total Score
83
100
94
88
Health Score Breakdown
The package has four releases since March 2023, but none in the 12 months before collection and the latest release was in December 2024. That long release gap lowers confidence in continued maintenance.
The repository recorded zero commits and zero active maintainers in the three months before collection. Combined with the older last release, this indicates maintenance has gone quiet.
All eight workflows use read-only permissions and have no untrusted checkouts or script injection, but all 20 action references are unpinned and the audit found a high-confidence unpinned container image. This creates reproducibility and CI supply-chain hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Evan Sims |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/event-dispatcher Version ^1.0 | — | — |
psr-discovery/discovery Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.