dmstr/symfony-job-queue-bundle

Release historycaution

The package is only about 3.5 months old, with five releases and a median interval of about 8 days. This shows active early development but provides little long-term maintenance history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version 0.3.0 is not a stable major release, so its API and behavior may still change materially. It is not marked as a prerelease, which provides some compensation.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both referenced actions are unpinned. The lack of a top-level permissions block is acceptable here because the workflow does not request top-level write access.