rpq/server

Release historydanger

The latest release was over 7 years ago, with no releases in the last 12 months and only 3 releases overall. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

There were no commits and no active maintainers in the last 3 months, consistent with the repository's last push being over 7 years ago. This is a severe abandonment concern.

Package scaffoldingcaution

The package includes a useful README and documentation, but the project reports no tests or changelog. Missing tests materially weaken confidence in maintenance and regression handling, while the README provides some compensating consumer guidance.

Repo toolingcaution

Composer is used for builds, which is appropriate, but no security-scanning tooling is present. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations unclear. This adds transparency risk, especially for a queue server with runtime dependencies.