The small repository is clearly tied to the package, has a usable README, and has no install-time scripts or deprecation notice. Its old PHP/Swoole stack, absent tests and security scanning, and lack of recent project activity make long-term maintenance a serious concern.
38%
Total Score
63
50
67
83
The latest release was published in May 2016, with no releases in the last 12 months despite the package being over 11 years old. This is strong evidence of abandonment risk.
There were zero commits and zero active maintainers in the last three months, following the last push in May 2016. The prolonged absence of maintenance is a major abandonment risk.
The package has four runtime dependencies, including PHP, Swoole, Beanstalk, and PSR logging; the older platform requirements increase compatibility and maintenance concerns for a modern project.
There are no open issues or pull requests and no recent activity. This is consistent with a dormant project, though the empty queue alone is not severe.
The repository has 11 stars and 6 forks, providing modest supporting evidence of real usage but not enough to offset the long maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0.0 || dev-master | — | — |
davidpersson/beanstalk Version 2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.