snipershady/queue-bridge

Release historycaution

The package is only 0 days old, with four releases since October 11 and a median interval of about 6 hours. This shows active initial work but provides little evidence of long-term maintenance.

Repo bus factorcaution

One contributor made all 11 commits in the last 3 months, giving the project a bus factor of one. That concentration leaves maintenance vulnerable if the sole contributor stops.

Security policycaution

The repository has no security policy. For a message-queue library handling application data and infrastructure integrations, this is a transparency and vulnerability-reporting gap.

Workflow auditcaution

The single workflow is fully analyzed, uses read-only permissions, and has no detected injection or high-confidence audit findings. However, all 18 action references are unpinned, leaving the build exposed to moving action versions.