The package includes tests, a clear README, and release notes for this version. Its small contributor base, absent security policy, and unpinned workflow actions reduce maintenance resilience and build transparency.
68%
Total Score
63
94
75
One contributor made all four commits in the last three months. Organization backing provides some handoff capacity, but recent activity still depends on a single active contributor.
The repository recorded four commits in the last three months, showing ongoing work but a relatively small recent maintenance volume.
Five issues and two pull requests remain open, with no issues or pull requests closed in the last month. This suggests limited recent project interaction, though it is not evidence of abandonment by itself.
The project uses Make and Composer, but no security scanning tools were detected. That leaves a transparency gap for a library intended to handle messaging infrastructure.
The repository has no security policy, so users are given no documented process for reporting vulnerabilities or receiving security guidance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^4.0 | — | — |
puzzle/pieces Version ~3.0 | — | — |
swarrot/swarrot Version ^4.0 | — | — |
symfony/console Version ^5.4|^6.0|^7.0 | — | — |
puzzle/configuration Version ~8.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.