rundum/event-bundle

Usable with caveats: the package is actively released, licensed, tested, and not deprecated or archived. However, the repository has no commits in the last three months, lacks security tooling and policy, and does not clearly identify the package in its repository documentation.

Latest 0.1.13

Packagist

68%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last three months, despite the latest release being published during that period. This weakens confidence in ongoing maintenance after the release.

Repo package mention

The repository name does not match the package name, and the README package mention could not be confirmed. The linked repository may still be valid for a sub-package, but the package-to-repository relationship is not clearly documented.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher. Low visibility is not proof of poor quality, but it provides little supporting evidence of community adoption or review.

Repo tooling

Composer is used for the build, but no security scanning tools were detected. The missing scanning reduces supply-chain transparency, though it is not evidence of maliciousness by itself.

Security policy

The repository has no security policy. This is a genuine disclosure and maintenance gap for a dependency, with no provided evidence compensating for it.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Hendrik Pilz

Direct Dependencies

Dependency	Last Release	Score
doctrine/orm Version ^2.16\|^3.5	—	—
symfony/http-kernel Version ^6.3\|^7\|^8	—	—
doctrine/doctrine-bundle Version ^2.10\|^3	—	—
symfony/framework-bundle Version ^6.3\|^7\|^8	—	—