fivelab/amqp

Repo bus factorcaution

All two recent commits came from one contributor. Organization backing provides some continuity, but no second active contributor is shown in this period.

Repo commit activitycaution

The repository had two commits in the last three months, so maintenance is still occurring, but activity is relatively light for a library with ongoing releases.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no published security policy, leaving the reporting and response process unclear for a messaging library.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, script injection, or high-confidence findings. However, all six action references are unpinned, which weakens build reproducibility and supply-chain hygiene.