pocketmine/pocketmine-mp

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement specified. Package-level deprecation is a severe adoption risk even though recent releases exist.

Repository archiveddanger

The linked source repository is archived, which strongly indicates that normal maintenance and issue handling have stopped. Its last push was on July 9, 2026, but archival status outweighs that recent activity.

Dangerous workflowscaution

Three workflows use pull_request_target, which warrants review because that trigger can expose privileged workflow context. The analysis found no untrusted checkouts or script injection, so this is not a severe workflow finding.

Repo bus factorcaution

One contributor made 11 of 12 recent commits, leaving maintenance highly concentrated. The organization backing provides some handoff capacity, but the concentration remains a concern, especially alongside archival.

Repo commit activitycaution

The repository recorded 12 commits from 2 active maintainers in the last 3 months, showing recent work rather than complete inactivity. However, this activity conflicts with the repository's archived state and is too limited to offset it.