webfiori/queue
The MIT license, focused dependency set, repository tests, and security tooling improve transparency. All 12 workflow actions are unpinned, and recorded contributor activity is quiet; pin v1.2.0 while watching maintenance.
70%
Total Score
75
100
94
100
Health Score Breakdown
The package is only 114 days old with three releases, including the assessed release today, so it shows active publishing but has limited history for judging long-term maintenance.
No commits and no active maintainers were recorded during the last three months. The new release provides some current activity, but the recent commit record remains too quiet for a strong maintenance assessment.
All five workflows were analyzed without high-confidence findings or unsafe trigger sinks, but all 12 action references are unpinned. That leaves avoidable supply-chain drift risk despite otherwise clean workflow structure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ibrahim BinAlshikh |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.