quantaforge/queue

Release historydanger

This is the only release, published over two years ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance for a queue library.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the registry's lack of recent releases and increasing abandonment risk.

Licensecaution

The artifact includes an MIT license file, which provides licensing coverage, but the manifest declares the package proprietary; that mismatch reduces metadata clarity.

Security policycaution

The repository has no security policy and no recorded security scanning tools. This is a transparency and issue-response gap, though it does not by itself make the package unfit.

Workflow auditcaution

The single workflow uses a pull_request_target trigger without an untrusted checkout or script-injection sink, so the trigger is not dangerous here. However, its one action reference is unpinned, creating a modest reproducibility and supply-chain hygiene concern.