culturalinfusion/laravel-sqs-fifo

Release historycaution

The latest release was published about 17 months before collection, with no releases in the last 12 months. Seven releases over roughly three years show a real project history, but current maintenance appears stalled.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is consistent with the long release gap and raises maintenance and abandonment concerns.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling security issues, though it is not by itself evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed and has no untrusted checkout or script-injection findings, but it contains a high-confidence low-severity adhoc-packages finding because it installs a package outside a lockfile. Its one action is also unpinned, adding reproducibility risk.