zgp0012/easyrabbitmq

The package is small and clearly identified, with a focused dependency set, a README, and a stable release. It has had no release or commit activity for over four years, and its single-user project lacks tests and security scanning. That makes ongoing maintenance and timely fixes uncertain.

Latest 1.1.1

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in June 2022, with no release in over four years. This is strong evidence of abandonment risk despite the stable current version.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, and its last push was in June 2022. The long inactivity materially lowers confidence in ongoing maintenance.

Maintainers

One registry maintainer is consistent with a small user-owned project, but it leaves little visible redundancy for maintenance or security response.

Repo tooling

Composer is used for the build, which is appropriate, but no security scanning tooling was detected. That weakens evidence of routine vulnerability detection.

Security policy

The repository has no security policy, so consumers have no documented channel or process for reporting vulnerabilities. This is a transparency and response gap, though not severe on its own.