wwwision/dcb-eventstore

Maintainerscaution

Only one registry account has publish access, which creates a narrow publishing base; the recent release cadence and linked repository provide some compensation.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. This conflicts somewhat with the frequent release history and warrants a modest maintenance concern rather than an abandonment verdict.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving repository security hygiene less transparent.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities.

Workflow auditcaution

The workflow audit completed cleanly, uses read-only permissions, and found no dangerous sinks or audit findings. However, all 9 action references are unpinned, leaving avoidable update and provenance risk.