silpo-tech/message-bus-bundle
It has a clear MIT license, README, tests, and a recent release cadence. The small repository audience, missing security policy, and unpinned CI actions leave less assurance for long-term maintenance.
68%
Total Score
75
100
75
Health Score Breakdown
The repository recorded 0 commits and 0 active maintainers in the past three months. This is a meaningful maintenance concern, although the package still had regular releases during its first year.
The repository has no security policy. This reduces vulnerability-reporting transparency, though the absence of a policy alone does not show that the package is unsafe.
All 10 analyzed action references are unpinned, which weakens build reproducibility and update control. The workflow was fully analyzed, uses job-level permissions, and had no untrusted checkout or injection findings.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/uid Version ^7.0 | — | — |
symfony/console Version ^7.0 | — | — |
enqueue/amqp-lib Version ^0.10.9 | — | — |
symfony/serializer Version ^7.0 | — | — |
enqueue/enqueue-bundle Version ^0.10 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.