coercive/sftp

Release historydanger

This is the package's only release, published over three years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with the single release, this indicates that maintenance has effectively stopped.

Dependency profilecaution

The runtime dependency profile is small, but consumers must provide PHP and the ext-ssh2 extension, which narrows portability and raises setup requirements.

Package file treecaution

The package contains only five files, including a single dist/SFTP.php implementation. The matching repository tree supports provenance, but the minimal source surface provides little evidence of engineering maturity.

Project backingcaution

The repository is owned by a user account rather than an organization, so there is no demonstrated organizational backing to offset the thin maintenance record.