traderinteractive/mongo-queue

Repo commit activitycaution

No commits and no active maintainers were observed during the last 3 months, which is a meaningful maintenance-momentum concern despite the recent release and repository push evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The absence of scanning lowers security-process transparency, though it is not by itself evidence that the package is unsafe.

Security policycaution

The repository has no SECURITY.md or equivalent security policy, leaving vulnerability reporting and response expectations undocumented.

Token permissionscaution

The one workflow lacks top-level token permissions declarations. No top-level write permissions were observed, but explicit least-privilege configuration would provide stronger workflow hygiene.