The package has tests, a clear MIT license, and a matching organization repository. Its small footprint and stable major release reduce adoption complexity, but pin this version and verify continued maintenance before upgrading.
62%
Total Score
75
100
89
83
The package has 25 releases over more than seven years, but none in the last 12 months; the last release was over a year ago. This is a meaningful maintenance concern, though the historical cadence was previously regular.
There were no commits and no active maintainers in the last three months. Combined with no releases in the last 12 months, this raises the possibility that maintenance has stalled.
The repository has one star, one fork, and no watchers, indicating very limited public adoption. Popularity is only supporting evidence, but this provides little external validation.
The repository has no published security policy. For a message-routing library, this weakens the documented process for reporting and handling vulnerabilities.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 9 action references are unpinned. The clean audit is positive, while unpinned actions leave avoidable build-integrity exposure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-service-bus/common Version v5.2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.