This is a usable but still young package with a healthy release cadence, stable 1.3.0 versioning, MIT licensing, an unarchived organization-owned repository, and recent commit activity. The main concerns are that the project is only 70 days old, all 14 recent commits come from one contributor, the artifact and repository contain no tests, and no security scanning or security policy is present. These issues make the package less mature and more dependent on a single maintainer, but the active release history and organization backing provide meaningful compensation; it is reasonable to consider with normal dependency review and monitoring.
68%
Total Score
80
50
81
90
Six runtime requirements, including PHP extensions, Guzzle, and the related storage-common package, are appropriate for an Azure Queue SDK but create several transitive and platform compatibility dependencies.
A substantial README and changelog are present, and GitHub Releases are used, but neither the package nor the repository contains tests. The documentation compensates for some transparency needs, while the absence of tests remains a maintainability concern for an SDK.
The package is only 70 days old with five releases and a median interval of about 8 days, indicating active early development but limited historical maturity.
One contributor made all 14 commits in the last three months, creating a clear single-maintainer continuity risk. Organization ownership provides some potential handoff capacity but does not demonstrate a second active contributor.
There were no new or closed issues or pull requests in the last month, and issue counts are unavailable. This is limited evidence of community activity, though the package's recent commit and release activity partly compensate.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.8 || ^8.0 | — | — |
azure-oss/storage-common Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.