mammatus/queue-contracts

Lifecycle scriptscaution

The package defines post-install and post-update Composer scripts. These add installation-time behavior that consumers should understand, though the signal alone does not show harmful or unusually complex actions.

Release historycaution

The package has only one release, published about one year ago, with no releases in the past 12 months. That provides little evidence of ongoing maintenance for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months. Recent pull requests provide some activity, but they do not replace sustained commit history.

Repo toolingcaution

The project uses Composer and Make, showing basic build tooling, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

No repository security policy was found. That weakens the project's disclosure transparency, although it does not by itself show abandonment or unsafe code.