fusio/adapter-mqtt

Release historycaution

The package has six releases over about 4 years and only one release in the last 12 months, with a typical gap of about 9 months. The latest release is recent, but the overall cadence is sparse.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months. Although the latest release was recent, this leaves current maintenance capacity uncertain.

Repo toolingcaution

The repository uses Composer for builds, but no security-scanning tool was detected. That is a modest transparency and maintenance gap for a dependency project.

Security policycaution

The repository has no security policy. This weakens the project's documented vulnerability-reporting process, though it is not evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all four action references are unpinned and the audit found a high-confidence unpinned container image. This creates avoidable CI supply-chain hygiene risk.