popphp/pop-ftp

Package scaffoldingdanger

The release notes explicitly mark version 4.0.3 as end-of-life and state that it will no longer be maintained for security purposes, while recommending HTTPS or SSH instead of FTP. This is a severe adoption risk despite the included README and release notes.

Repo commit activitydanger

The repository shows only 1 commit and 1 active maintainer in the last 3 months. That indicates minimal recent maintenance capacity, although it is consistent with the stated end-of-life status.

Repo bus factorcaution

All recent commit activity comes from one contributor, with a 100% top-contributor share. Organization backing provides some handoff potential, but no second active contributor is shown.

Security policycaution

The repository has no security policy. For a component whose release notes explicitly say security maintenance has ended, this further reduces transparency about how vulnerabilities would be handled.