Package Health

azure-oss/storage-queue

This is a usable but still young package with a healthy release cadence, stable 1.3.0 versioning, MIT licensing, an unarchived organization-owned repository, and recent commit activity. The main concerns are that the project is only 70 days old, all 14 recent commits come from one contributor, the artifact and repository contain no tests, and no security scanning or security policy is present. These issues make the package less mature and more dependent on a single maintainer, but the active release history and organization backing provide meaningful compensation; it is reasonable to consider with normal dependency review and monitoring.

Latest 1.3.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

80

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Dependency profilecaution

Six runtime requirements, including PHP extensions, Guzzle, and the related storage-common package, are appropriate for an Azure Queue SDK but create several transitive and platform compatibility dependencies.

Package scaffoldingcaution

A substantial README and changelog are present, and GitHub Releases are used, but neither the package nor the repository contains tests. The documentation compensates for some transparency needs, while the absence of tests remains a maintainability concern for an SDK.

Release historycaution

The package is only 70 days old with five releases and a median interval of about 8 days, indicating active early development but limited historical maturity.

Repo bus factorcaution

One contributor made all 14 commits in the last three months, creating a clear single-maintainer continuity risk. Organization ownership provides some potential handoff capacity but does not demonstrate a second active contributor.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and issue counts are unavailable. This is limited evidence of community activity, though the package's recent commit and release activity partly compensate.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Brecht Vermeersch

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^7.8 || ^8.0
—
—
azure-oss/storage-common
Version ^2.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
3 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform