palpalani/laravel-sqs-queue-json-reader

Project backingcaution

The package and repository are owned by the same individual account, so there is no organizational backing to offset the thin maintainer base.

Release historycaution

The package has existed for about 5 years 8 months with 49 releases, but only one release in the last 12 months; the recent release provides some evidence of ongoing publishing despite a slower cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, which is a meaningful maintenance concern even though the repository was recently pushed and a release was published.

Version stabilitycaution

Version 0.6.0 is a normal, non-prerelease release, but the package remains below a stable 1.0 major version, which modestly limits maturity evidence.

Workflow auditcaution

All 19 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue plus archived actions; the pull_request_target workflow had no untrusted checkout or script-injection sink, so this is workflow hygiene caution rather than a severe dependency risk.