Recent source activity and organization backing provide some continuity, while the MIT license keeps reuse clear. The registry marks this package abandoned and names league/flysystem-sftp-v3 as its replacement; use that package instead.
20%
Total Score
63
71
83
Packagist marks the entire package as abandoned and names league/flysystem-sftp-v3 as the replacement. This outweighs the repository's recent activity because new dependencies should not target the withdrawn package.
The package has existed for about 11 years with 65 releases and a latest release in August 2026, but only one release occurred in the last 12 months. The recent release is positive, while the slower cadence is a minor maintenance concern.
All three-month commit activity came from one contributor, giving the repository a concentrated short-term maintenance base. Organization backing provides some compensation, but no second active contributor is shown.
There was one commit in the last three months, showing some recent maintenance but a very low pace for a dependency.
The repository has 25 open issues and 6 open pull requests, but no issues or pull requests were opened or closed in the last month. That suggests limited current project activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/flysystem Version ^3.0.0 | — | — |
phpseclib/phpseclib Version ^2.0 | — | — |
league/mime-type-detection Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.