politsin/phpmqtt

Release historydanger

The package has only two releases, both published in August 2022, and none in the last 12 months despite being about four years old. This is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing no updates since 2022.

Package scaffoldingcaution

A README is included and describes the package, but the package and repository contain no tests or changelog. Missing tests reduce confidence for a library, while the missing changelog is a minor gap.

Repo toolingcaution

Composer build tooling is present, but the repository has no security scanning tools. That is a genuine maintenance and transparency gap, though less serious than the prolonged inactivity.

Security policycaution

The repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This compounds the concern created by the lack of recent activity.