The package is very small and has no reported security policy or scanning, leaving limited assurance around project hygiene. Its MIT licensing, focused dependency set, README, and release notes make adoption more practical.
62%
Total Score
100
100
81
75
The latest release was on September 11, 2022, with no releases in the last 12 months. That long period without a release lowers confidence in ongoing maintenance, despite four releases and a previously regular cadence.
Composer is used for the build, but no security scanning tool is configured. This provides basic build structure while leaving dependency and release checks less transparent.
The repository is not archived, but it was last pushed on September 11, 2022. This avoids an abandonment verdict while still supporting concern about stale maintenance.
No security policy was found in the repository. For a small event-dispatching library this is a hygiene gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symbiotic/event-contracts Version 1.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.