The codebase has tests, a clear license, and an organization-owned repository. Its last release and commit were over four years ago, and all 10 workflow actions are unpinned, leaving maintenance and build-integrity concerns.
42%
Total Score
75
89
75
The latest release was April 5, 2022, with no releases in the following 12 months; a mature package with this long a release gap has meaningful abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and limited evidence of ongoing maintenance.
The repository has 1 star, 1 fork, and 0 watchers, providing little community evidence to offset the lack of recent project activity.
The repository has no security policy, reducing the transparency of vulnerability reporting for a package that has otherwise been inactive for years.
The only workflow was fully analyzed and had no dangerous audit findings, but all 10 action references are unpinned, so build inputs can change without a fixed revision.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-service-bus/mutex Version v5.1.* | — | — |
php-service-bus/common Version v5.1.* | — | — |
php-service-bus/storage Version v5.1.* | — | — |
php-service-bus/message-serializer Version v5.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.