sebastianfeldmann/ftp

Release historycaution

The package has existed since 2018 but only 5 releases, with no releases in the last 12 months and a median interval of about 525 days. This points to slow maintenance, though the latest release is recent enough to avoid an abandonment judgment.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is a meaningful maintenance concern, despite the repository remaining current through its latest push in March 2025.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. That reduces assurance for a package handling FTP connections, although the absence is a hygiene gap rather than evidence of unsafe behavior.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap for a network-facing library.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.