Risky to adopt: this package has had only one release, with no new release or repository activity for about six years. The tiny repository and missing README add transparency concerns, despite a valid MIT declaration and no install-time scripts.
38%
Total Score
50
100
50
83
There has been only one release, published about six years ago, and none in the last 12 months. This is strong evidence of abandonment risk for a library dependency.
The repository is not formally archived, but it was last pushed about six years ago, so the unarchived status does not compensate for the prolonged inactivity.
The published package has no README, while the repository also has no tests or changelog. The GitHub release mechanism is present, but it does not compensate for the lack of consumer documentation and project validation evidence.
The registry namespace is finaplus while the linked repository is owned by the individual account itcyborg, providing limited visible organizational backing for ongoing maintenance.
The repository has zero stars and zero forks, with only one watcher. Popularity is not decisive by itself, but these figures provide no supporting evidence of broad use or community oversight.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-amqplib/php-amqplib Version ^2.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.