Clear licensing, documentation, tests, and a small dependency surface reduce adoption friction. There is no security policy, and all four workflow action references are unpinned.
68%
Total Score
50
100
83
83
The repository is owned by a user account rather than an organization, so the available backing signal does not provide evidence of organizational maintenance capacity.
The package is only 61 days old and has two releases, so its maintenance history is still limited even though releases have occurred recently.
One contributor made 100% of the four recent commits, creating a concentrated maintenance dependency with no demonstrated handoff capacity.
Four commits were made in the last three months, showing recent activity, but only one active maintainer contributed them.
The repository has zero stars and forks and one watcher; this is weak supporting evidence, though low popularity alone does not make a small package unhealthy.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/event-dispatcher Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.