teamsquad.io/php-event-bus

Licensedanger

The manifest declares a proprietary license, with no recognized license text or license file in the package or repository. That creates a material legal barrier for an open-source dependency.

Release historycaution

The package has 21 releases over roughly four years, but none in the last 12 months and the latest registry release was over a year ago. This indicates slowed release maintenance, partly offset by recent repository activity.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. Recent pull-request activity and a recent push provide some compensation, but the direct commit signal still suggests limited recent development.

Security policycaution

The repository has no published security policy. This is a transparency gap, although the presence of automated security and static-analysis tooling provides partial compensation.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported dangerous findings. However, all 7 action references are unpinned, leaving builds exposed to moving action revisions.