ltd-beget/openssh-key

Release historycaution

The package has existed since 2019 but has only 3 releases, with no releases in the last 12 months and a median interval of about 2.9 years. The latest release in May 2025 shows it is not abandoned outright, but the cadence is very slow.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with the slow release history, this indicates limited current maintenance capacity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although this could be a subpackage or naming variation, the lack of an explicit connection makes package provenance less clear.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tool was detected. For a small PHP library this is a modest transparency and maintenance gap, not a severe risk by itself.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the package's tests and recent release provide some compensating project evidence.