Package Health

snicco/event-dispatcher-testing

The repository includes tests, a matching README, an organization owner, and a clear LGPL license. It is still a beta release with no commits in the last three months, lacks a security policy, and its workflow uses one unpinned action.

Latest v2.0.0-beta.9PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has 33 releases since April 2022, but none in the last 12 months and the latest was published in September 2024—roughly two years ago. This materially raises maintenance and abandonment concerns.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the long gap since the latest release, this points to recently inactive maintenance.

Security policycaution

The linked repository has no security policy. That weakens vulnerability-reporting transparency, although it is not evidence that the package is unsafe.

Version stabilitycaution

The assessed release is v2.0.0-beta.9, and 45% of recent releases were prereleases. Consumers should expect some API instability.

Workflow auditcaution

The single workflow uses one unpinned action, creating a modest reproducibility and action-supply-chain hygiene gap. Its pull_request_target trigger has no untrusted checkout or script-injection sink, so it is not severe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Calvin Alkan

Direct Dependencies

DependencyLast ReleaseScore
phpunit/phpunit
Version ^9.5.13
snicco/event-dispatcher
Version ^2.0

Weekly Downloads

Info

Last Published
2 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform