williameggers/reactphp-ssh-server

Project backingcaution

The registry namespace and repository owner match, so the source ownership is consistent; the owner is an individual rather than an organization, limiting institutional backing.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the recent registry release.

Security policycaution

The repository has no security policy. For an SSH server handling authentication and forwarding, this is a meaningful transparency and vulnerability-reporting gap.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted triggers, but all 4 action references are unpinned. That leaves avoidable build-integrity risk, while the missing top-level permissions block is acceptable on its own.