Package Health

pdffiller/laravel-queue-qless

This release appears to be a healthy dependency: it has a long release history dating to 2018, a current stable release, four releases in the last 12 months, an active non-archived organization-owned repository, recent commits from four contributors, tests, a matching repository with package references, and no install-time lifecycle scripts or registry deprecation. The main reservations are modest repository popularity, absence of a security policy, and no explicitly declared top-level workflow token permissions; these are transparency and hardening gaps rather than evidence of abandonment. The package is licensed under MIT and has a license file, while its small registry maintainer list is reasonably offset by organization backing and distributed recent repository activity.

Latest v1.11.2PackagistPackagist

86%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Repo popularitycaution

The repository has modest adoption indicators with 9 stars and 8 forks; this is supporting evidence only and does not outweigh the stronger maintenance signals.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; the lack of scanning is a hardening gap, though it is not evidence of abandonment.

Security policycaution

No repository security policy was found, reducing vulnerability-reporting transparency and leaving a genuine but moderate hygiene gap.

Token permissionscaution

The sole workflow has no top-level token permissions declaration. Although no top-level write permissions were observed, explicit least-privilege policy is absent.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Serhii Osadchyi

Direct Dependencies

DependencyLast ReleaseScore
pdffiller/qless-php
Version ^3.23

Weekly Downloads

Info

Last Published
12 days ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform