pdffiller/qless-php

Dependency profilecaution

The package has 12 runtime dependencies, including several PHP extensions and Redis-related libraries; this is a meaningful integration surface but not excessive for a queueing library.

Repo commit activitycaution

Two commits from two active maintainers in the last three months show some ongoing work, though the low volume supports a modest maintenance reservation.

Security policycaution

No repository security policy was found, leaving reporting and response expectations undocumented for a library with operational dependencies.

Workflow auditcaution

All three workflows were analyzed without untrusted checkouts or script injection, but all five action references are unpinned and the audit found a high-confidence unpinned container image plus inherited secrets. These are meaningful CI supply-chain and credential-hygiene weaknesses, though no dangerous trigger was present.