xprt64/cqrs-eventstore-mongodb

Release historycaution

The package has 102 releases since January 2017, but it has had no releases in the last 12 months; the latest release was about 16 months ago. This lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, consistent with a project that is currently inactive. This is a meaningful maintenance concern but not severe abandonment on its own because the repository is not archived and the package has a long release history.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. Although a subpackage can legitimately use a different repository, the available evidence does not clearly establish that this repository belongs to the published package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving no documented path for reporting vulnerabilities or describing security handling.