faraweilyas/sshbunny

Risky to adopt: the package has a clear, licensed repository with tests and no deprecation, but it appears effectively abandoned. Its last release and repository push were nearly eight years ago, with no recent commits or active maintainers.

Latest v1.0.4

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

All five releases were published between November 24 and December 7, 2018, with no releases in the last 12 months; nearly eight years without a release is a strong maintenance concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nearly eight-year gap since the last push.

Repo popularity

Five stars, zero forks, and two watchers indicate a very small user base. Popularity is only supporting evidence, but these figures provide little external evidence of ongoing maintenance.

Repo tooling

Composer is used as the build tool, but no security-scanning tooling is present; this is a modest transparency gap rather than a standalone severe risk.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unclear, though the long-standing inactivity is the more significant concern.