Clear documentation, tests, and a matching repository make integration easier. MIT licensing, no install-time scripts, and a small dependency set are positives, but long-term support remains uncertain.
67%
Total Score
67
100
86
75
The repository is owned by an individual account rather than an organization, so there is no organizational backing to offset the concentrated contributor base.
The package is only 48 days old, with four releases clustered on the first day; this shows initial activity but provides little evidence of sustained maintenance.
All five recent commits came from one contributor, leaving maintenance dependent on a single person and creating a real continuity risk.
Composer is used for builds, but no security scanning tooling was detected. That is a modest transparency and maintenance gap rather than evidence of an unsafe release.
The repository has no security policy, reducing clarity about vulnerability reporting and response expectations for a package intended for production queue handling.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webman/redis-queue Version ^1.2 || ^2.1 | — | — |
workerman/redis-queue Version >=1.1 <1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.