smoothphp/eventsourcing
The small, focused artifact has few dependencies and no install-time scripts. Organization backing and a stable v5 release help, but future fixes and security maintenance are unlikely.
38%
Total Score
50
100
67
75
Health Score Breakdown
The package has had no release in over 8 years, despite 20 releases since 2015. This strongly indicates abandonment risk for a dependency that may need compatibility or security fixes.
The repository recorded zero commits and zero active maintainers in the last 3 months, and its last push was in February 2018. There is no observed current maintenance capacity.
The artifact contains no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but a library without a README gives consumers little integration guidance.
The linked repository has only 2 stars and no forks, providing little supporting evidence of community use or review. Popularity is not decisive, but it offers no meaningful offset to the inactive maintenance signals.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though the package's small scope limits its weight compared with the maintenance concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Simon Bennett |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 smoothphp/contracts Version 1.0.* | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.