The README gives concrete installation, operation, and dependency instructions, and the repository matches the package. Composer tooling and an MIT license help, but the missing security policy leaves a modest transparency gap.
56%
Total Score
50
70
50
The latest release was in January 2022, with no releases in the last 12 months; this is a substantial maintenance concern for a production queue package.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating currently inactive development; the repository is not archived and was pushed in March 2025, which partly offsets the concern.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that processes messages and exposes monitoring functionality.
Version 0.0.3 is still pre-1.0, so compatibility and maturity are less established, though it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
workerman/workerman Version ^4.0 | — | — |
mrtwenty/flower-client Version ^0.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.