It has a clear MIT license, tests, release notes, and no install-time scripts. Organization backing, repository tooling, and a security policy provide useful continuity for a small project.
67%
Total Score
63
50
94
100
The release has nine runtime dependencies, including framework, messaging, and Redis components. This is a meaningful integration surface but is consistent with the package's queue-system role.
The package is 389 days old with three releases and two releases in the last 12 months, but the median interval is about 164 days, indicating a modest release cadence.
All four recent commits came from one contributor, creating a concentrated maintenance risk. Organization ownership provides some ability to hand work off, so this is caution rather than a severe risk.
Only four commits were recorded in the last three months, showing some ongoing work but a fairly light maintenance pace.
The repository has nine open issues and four open pull requests, with no issues or pull requests opened or merged in the last month, suggesting limited recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mezzio/mezzio Version ^3.20 | — | — |
dotkernel/dot-cli Version ^3.11.1 | — | — |
symfony/redis-messenger Version ^v8.1.1 | — | — |
netglue/laminas-messenger Version ^2.5.0 | — | — |
dotkernel/dot-errorhandler Version ^5.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.