tomatom/jobqueuebundle
Recent releases, tests, and a current repository support ongoing maintenance. Single-contributor activity, the license mismatch, and unpinned workflow actions reduce confidence for adoption.
68%
Total Score
50
80
50
Health Score Breakdown
The manifest declares MIT, but the artifact license file is detected as GPL-2.0; although a license file is present, the mismatch creates a material legal and dependency risk.
All 2 recent commits came from one contributor, leaving maintenance highly concentrated despite organization ownership providing some handoff capacity.
The repository recorded 2 commits in the last 3 months, showing recent activity but only modest maintenance throughput.
The repository has no security policy, which leaves vulnerability reporting and response expectations undocumented for a package that runs scheduled commands and exposes a browser interface.
The sole workflow was fully analyzed with no untrusted checkout or script-injection findings, but both of its action references are unpinned, reducing build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Matěj Votruba |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^2|^3 | — | — |
doctrine/orm Version ^2|^3 | — | — |
symfony/form Version ^6.4 || ^7.4 | — | — |
symfony/lock Version ^6.4 || ^7.4 | — | — |
symfony/process Version ^6.4 || ^7.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.