simps/mqtt-cli

The package is clearly identified, licensed, and documented, with no install-time scripts or registry deprecation. Its tiny project footprint, absent security policy, and unpinned workflow actions leave limited evidence of ongoing care.

Latest v0.2.0

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in more than four years: its latest release was March 3, 2022, with zero releases in the last 12 months. This materially raises abandonment risk despite a prior release cadence of about 75 days.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This is the strongest evidence that current maintenance capacity is limited.

Repo popularity

The repository has 7 stars and 1 fork, showing a very small user and contributor footprint. Low popularity is supporting evidence rather than a verdict, but it provides little external maintenance resilience.

Security policy

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a meaningful hygiene gap, though it is partly offset by the package being small and clearly sourced.

Workflow audit

The single workflow was fully analyzed with no detected injection or high-severity findings, but both action references are unpinned. That leaves avoidable build-integrity exposure and is a modest workflow hygiene concern.