Package Health

chelout/laravel-yandex-message-queue

The repository has no security policy or scanning, and its footprint is only eight files with one star. MIT licensing and a README make integration clearer, but they do not offset the maintenance uncertainty.

Latest v0.0.3PackagistPackagist

35%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The latest release was published nearly six years ago, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment risk for a production dependency.

Repo commit activitydanger

The repository had no commits and no active maintainers in the last three months, consistent with the long release gap. No newer activity is provided to compensate for this concern.

Repo popularitycaution

The repository has one star, one fork, and one watcher, providing little evidence of broad community use or review. Low popularity is supporting caution rather than a verdict by itself.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning reduces assurance for an integration package with runtime dependencies.

Security policycaution

No security policy was found, leaving vulnerability reporting and response expectations unclear. This is a transparency and maintenance gap, though it is not severe on its own.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Viacheslav Ostrovskiy

Direct Dependencies

DependencyLast ReleaseScore
illuminate/bus
Version ^6.0|^7.0|^8.0
—
—
aws/aws-sdk-php
Version ^3.0
—
—
illuminate/queue
Version ^6.0|^7.0|^8.0
—
—
illuminate/support
Version ^6.0|^7.0|^8.0
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform