PHP worker for the RoadRunner TCP plugin: handle raw TCP connection events and data in RoadRunner workers
76%
Total Score
healthy
A fresh stable release and strong project hygiene outweigh quiet recent commits and unpinned workflow actions.
There were 0 commits and 0 active maintainers in the last 3 months. The release and 12 merged pull requests provide some compensating evidence, but the quiet direct commit window is a maintenance caution.
The repository name does not match the package name and its README does not mention spiral/roadrunner-tcp. The release notes say the package was renamed to roadrunner/tcp, which partly explains the mismatch but does not fully remove the provenance ambiguity.
All 6 workflows were analyzed with no audit findings or untrusted checkout and script-injection paths. However, all 10 action references are unpinned and one workflow grants top-level write permissions, creating a moderate workflow hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
roadrunner/worker Version ^3.8 | — | — |
spiral/roadrunner Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.