pinkcrab/queue

It includes a substantial test suite, clear documentation, and matching MIT licensing. The single registry maintainer and absent security policy leave limited independent assurance.

Latest 2.1.1

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about four years with 10 releases and a median interval of about 75 days, but only one release appeared in the last 12 months. The latest release is recent, so this suggests slower maintenance rather than abandonment.

Repo commit activity

There were no commits and no active maintainers in the last three months. The recent release and repository push provide some compensation, but the current maintenance gap remains a concern.

Repo tooling

The repository uses Composer but reports no security scanning tools, leaving less automated assurance than a mature project might provide.

Security policy

The repository has no security policy, so users have no documented reporting or response process visible in the collected evidence.

Workflow audit

All four workflows were analyzed without dangerous triggers, sinks, or audit findings, but all 9 action references are unpinned. The workflows also omit top-level permissions blocks, which is acceptable on its own.