rebuy/amqp-php-consumer

Release historycaution

The package has been maintained since 2015 with 12 releases, but only one release in the last 12 months and a median interval of about 11 months indicate a slow cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which leaves current maintenance capacity uncertain despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no SECURITY.md policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

All six of six workflow action references are unpinned, weakening build reproducibility. The reported cache-poisoning issue has low confidence, so it is hygiene rather than a severe risk; the audit itself covered both workflows without failures.