This is a mature, stable, actively released package with a long history, 76 releases, eight releases in the last 12 months, a current non-prerelease major version, an unarchived matching repository, documented tests in the repository, and no install-time lifecycle scripts. The main concern is maintenance concentration: only one commit and one active contributor were observed in the last three months, with all recent commits from that contributor. Missing security scanning, an absent security policy, and unspecified workflow token permissions are additional hygiene gaps, but they do not outweigh the package's release continuity, repository activity, licensing, and substantial project maturity. It is generally reasonable to depend on, with normal monitoring of future maintenance activity.
78%
Total Score
60
100
94
80
Two registry publishing accounts are present. This is limited registry redundancy, but the repository and release history provide stronger evidence of ongoing maintenance than registry access count alone.
The repository is owned by a user account rather than an organization, so there is no provided organizational backing to offset the concentrated recent contributor activity.
All three-month commit activity is concentrated in one contributor with a 100% share, creating a maintenance bus-factor concern for a user-owned repository without organization-level handoff evidence.
Only one commit was recorded in the last three months, by one active maintainer, which indicates materially slow recent implementation activity despite the continuing release history.
Composer build tooling is present, but no security-scanning tools were detected; the missing security tooling is a hygiene gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/queue Version ^10.0|^11.0|^12.0|^13.0 | — | — |
php-amqplib/php-amqplib Version ^v3.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.