aleex1848/ssh

Release historycaution

The package has only three releases over about two years, with one release in the last 12 months and a median interval of about 10 months. That is slow but not abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release provides some compensating evidence, but ongoing maintenance capacity is still uncertain.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small package this is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it does not by itself show that the code is unsafe.

Workflow auditcaution

All seven action references are unpinned, and the audit found a high-confidence unpinned container image in the PHP coding workflow. No untrusted checkouts or script-injection sinks were found, so this is workflow hygiene risk rather than a severe dependency risk.