raphaeu/ssh2

Release historydanger

This package has only one release, published nearly eight years ago, with no releases in the last 12 months. That is strong evidence of abandonment rather than an actively maintained dependency.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the long release gap. No newer activity is provided to offset this maintenance concern.

Licensecaution

The manifest declares a proprietary license, with no recognized license and no license file in the package or repository. That creates a material legal and transparency concern for an open-source dependency.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Repository archivedcaution

The repository is not archived, which is a compensating sign, but it was last pushed nearly eight years ago. The stale repository state still raises abandonment risk.