clue/reactphp-ssh-proxy

Release historycaution

The latest registry release was in September 2022, with no releases in the last 12 months and only six releases overall. This is a meaningful maintenance concern, although the linked repository was pushed more recently.

Repo commit activitycaution

There were no commits or active maintainers in the measured three-month window. The recent repository push prevents this from indicating clear abandonment, but the lack of sustained activity remains a caution.

Repo toolingcaution

The project uses Composer, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a package that handles SSH connections.

Workflow auditcaution

The sole workflow was fully analyzed and had no dangerous audit findings or untrusted triggers. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.