enqueue/amqp-bunny

Repo bus factorcaution

All one recent commit came from a single contributor. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, by one active maintainer. The recent push prevents this from looking abandoned, but the current maintenance pace is thin.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package used in message infrastructure.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but all 3 action references are unpinned. The absence of a top-level permissions block is acceptable on its own, while unpinned actions remain a small reproducibility concern.