@types/ssh2

@types/ssh2 1.15.6 appears healthy to depend on: it is a mature, stable MIT-licensed type-definition package with a current release, no deprecation, no install lifecycle scripts, and a single lightweight runtime dependency. Its source repository is actively maintained, organization-backed, broadly contributed, security-scanned, and protected by a security policy and comparatively safe workflows. The artifact is intentionally minimal and lacks packaged tests and a changelog, but repository tests and GitHub Releases compensate for those gaps. The main residual concerns are absent build provenance attestation, only one release in the last 12 months, and the repository/package name mismatch inherent in its monorepo layout; these reduce transparency somewhat but do not indicate abandonment or an unfit dependency.

Latest 1.15.6NPM

Health Score Breakdown

Build provenancecaution

No build provenance attestation or trusted publisher identity is available, leaving a transparency gap in how the release was produced.

Release historycaution

The package has existed for about 10 years with 62 releases and a latest release on the collection date, but only one release occurred in the last 12 months, suggesting a slower recent cadence.

Repo package mentioncaution

The repository name and README do not directly match or mention @types/ssh2, which is a transparency concern under this signal; the package README nevertheless identifies the DefinitelyTyped types/ssh2 path, partially explaining the monorepo relationship.

View all 22 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Maintainers

types

Direct Dependencies

Dependency	Last Release	Score
@types/node Version ^18.11.18	—	—