imiphp/imi-mqtt

Dangerous workflowscaution

The repository has one pull_request_target workflow. No untrusted checkout or script-injection pattern was detected, but this workflow class warrants caution because it can run with elevated repository context.

Release historycaution

The package has 35 releases and a previously regular median interval of about 15 days, but it has had no releases in the last 12 months and its latest release was about 2 years and 9 months ago. This materially raises abandonment and compatibility risk.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. This is the strongest maintenance concern, although the repository remains organization-backed and is not archived.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For a network-facing MQTT package, that leaves a meaningful transparency and maintenance gap.

Repository archivedcaution

The linked repository is not archived, but its last push was about 2 years and 9 months ago, consistent with the stale release history.