kislayphp/queue

Repo bus factorcaution

All five recent commits came from one contributor, creating a meaningful maintenance continuity risk even though the repository is owned by an organization.

Repo commit activitycaution

Five commits in the last 3 months show ongoing activity, but the volume is modest for a package intended to provide a queue server and worker runtime.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving a transparency and maintenance-control gap.

Security policycaution

The repository has no security policy, making the process for reporting and handling vulnerabilities unclear.

Workflow auditcaution

All 8 action references are unpinned, and one workflow has top-level write permissions. The audit found no dangerous triggers, untrusted checkouts, script injection, or severity-bearing findings, so this is a hygiene concern rather than a severe workflow risk.