100OUT OF 100
TrustedHigh trustStatic read

sindresorhus/p-queue

This repository is a highly established, widely used utility library maintained by a prominent figure in the open-source community. The static analysis found no suspicious behavior, and the code is consistent with its declared purpose as a promise queue. No malicious behavior was observed in our static read; full runtime behavior was not executed in a sandbox on this pass.

Repository size
276 KB
Packages
0
Stars
4272
Created
16 yr 9 mo ago
Reputation signals
sindresorhus avatar
Sindre Sorhus
@sindresorhus
Account age16 yr 9 mo
Public repos1.1K
Forks134
Community sentiment100

Excellent

Code & behavior signals
No risky items found

No signatures, install hooks, obfuscation, or embedded secrets were found in the code.

Per-package scoring
Final verdict

No malicious behavior in our static read, and reputation is strong. Runtime was not executed in a sandbox on this pass, so this is a static-read clearance, not a guarantee.

What we could not verify
—Full runtime behavior (this repo was not executed in a sandbox on this pass)
—Every conditional and time-triggered branch
—Behavior under real credentials (no sandbox was run on this pass)
End-to-end logs
Clone
›Repository cloned successfully at commit 180ab9e.
Static scan
›No flagged regions or suspicious patterns detected.
Reputation
›Owner is a highly established, long-term contributor with a massive portfolio of trusted packages.
Read
›README intent matches the library functionality; no hidden install hooks or network activity found.
Score
›Score computed by formula: 100/100 (deterministic, code-driven)
›+8 [reputation] established_owner: Owner account is established (older than a year with multiple public repos).
›+6 [reputation] many_stars: Strong community signal (4,272 stars).
›+4 [reputation] good_sentiment: Positive community sentiment (100/100).
Auto-published at clauderabbit.in/sindresorhus/p-queue · re-checked when the repo changes