Package Health

roadrunner/worker

Base PHP worker for the RoadRunner application server: receives payloads over Goridge, sends responses and manages the worker pool

Latest v3.8.0PackagistPackagist

72%

Total Score

caution

A first release with no history and fully unpinned CI actions keeps this otherwise well-backed package in the caution range.

Health Score Breakdown

Release historycaution

This is the package's first recorded release, published on October 10, 2026, so there is no established release history or cadence yet.

Repo commit activitycaution

The repository records zero commits and zero active maintainers in the last three months, which is a maintenance warning, although the release and recent pull-request merges provide some compensating evidence.

Workflow auditcaution

All six workflows were analyzed without high- or medium-severity findings, and no untrusted checkout or script-injection paths were found. However, all 10 action references are unpinned and one workflow grants top-level write permissions, creating a workflow-hygiene caution.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Anton Titov
Valery Piashchynski
Aleksei Gagarin
Pavel Buchnev
Maksim Smakouz
RoadRunner Community

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^2.0 || ^3.0
—
—
spiral/roadrunner
Version ^3.0
—
—
roadrunner/goridge
Version ^4.5
—
—

Weekly Downloads

Info

Last Published
2 hours ago
Created
2 hours ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform