It includes a readable package, tests, licenses, and no install-time scripts. The project has seen no release activity for about 12 years, while its own documentation says it is not for production use.
34%
Total Score
50
67
75
The package has had no releases in about 12 years, with zero releases in the last 12 months. This is strong evidence of abandonment for a dependency that may need ongoing compatibility and fixes.
The release declares BSD-2-Clause and includes license files, so it is licensed. The artifact also detects MIT text in addition to BSD-2-Clause, creating a minor licensing-coverage ambiguity.
There have been no new or closed issues or pull requests in the last month, and two pull requests remain open. This is consistent with an inactive project, though the small project size limits how much activity would be expected.
The repository is not archived, which avoids the strongest abandonment signal, but it was last pushed about 10 years ago. The unarchived status does not compensate for the prolonged lack of activity.
The repository has no security policy. For a queue system intended to handle application jobs, this is a transparency and vulnerability-reporting gap, although it is secondary to the prolonged inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.