blomstra/database-queue

Tests, a clear README, release notes, and an MIT license make this extension straightforward to evaluate and integrate. Its CI has basic hygiene gaps, with unpinned actions and no repository security policy or scanning.

Latest 1.1.0

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 2 years and 8 months ago, with no releases in the last 12 months. That weakens confidence in ongoing maintenance, although the package has six releases and a previously regular cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. The repository is not archived and was pushed in January 2025, which provides some compensating evidence but does not show current activity.

Repo tooling

The project uses Composer build tooling, but no security scanning tools were detected. That is a modest assurance gap for a maintained dependency, though it is not evidence of a security defect.

Security policy

No security policy was found in the repository. This reduces transparency for reporting and handling vulnerabilities, with no provided signal showing an alternative security process.

Workflow audit

Both analyzed workflows use unpinned actions, so their build inputs can change unexpectedly. The audit found no untrusted checkout, injection, or high-severity findings, keeping this as a hygiene caution rather than a severe risk.