jeroen-de-dauw/file-fetcher
A clear README, tests, license, and small dependency set make integration straightforward. Use jeroen/file-fetcher instead, which the registry names as the replacement.
38%
Total Score
50
100
75
50
Health Score Breakdown
Packagist marks the package as abandoned and names jeroen/file-fetcher as its replacement. This is a substantial adoption risk even though the deprecation applies to the package rather than only this release.
The package has existed since 2013 with 15 releases, but it has had no releases in the last 12 months. Its long history is reassuring, while the current pause lowers confidence in continued maintenance.
The repository had no commits and no active maintainers in the last three months, reinforcing the risk that maintenance has stopped after the latest release.
The repository has no security policy. This is a transparency gap, although the available tooling and the package's small scope partly reduce its significance.
The workflow was fully analyzed with no dangerous triggers or audit findings, but all 9 action references are unpinned, leaving build inputs less reproducible.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jeroen De Dauw |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ~3.0|~2.0|~1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.