EventSourcing Database adapter for the Dynamic Consistency Boundary implementation
67%
Total Score
caution
Usable with caveats: maintenance has gone quiet and workflow dependencies are unpinned.
This is a young package, about 9 months old, with only one release and no established release cadence. That limits evidence of long-term maintenance but is partly expected for a new adapter.
There were zero commits and zero active maintainers in the last three months. For a package with only one release, this is a meaningful warning about ongoing maintenance capacity.
The repository has no stars, forks, or watchers. This is weak supporting evidence, but popularity is not required for a small, focused package and does not outweigh its other signals.
Composer build tooling is present, but no security-scanning tools were detected. The lack of scanning is a modest repository hygiene gap, not evidence of unsafe code by itself.
The repository has no security policy, leaving the preferred process for reporting vulnerabilities undocumented. This reduces transparency but is not severe enough to make the release unfit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/clock Version ^1.0 | — | — |
webmozart/assert Version ^1.11 | — | — |
guzzlehttp/guzzle Version ^7 | — | — |
wwwision/dcb-eventstore Version ^5 | — | — |
thenativeweb/eventsourcingdb Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.