karelwintersky/arris.php-file-download

Release historycaution

The package has 8 releases over about 3 years, with only 1 release in the last 12 months and a median interval of about 259 days. This indicates slow maintenance, though a recent release shows the project is not abandoned.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers during the last 3 months. This is a concrete maintenance concern, even though the repository was pushed recently.

Repo toolingcaution

The project uses Composer and Make, which supports repeatable development workflows, but no security-scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.

Security policycaution

No repository security policy was found. For a small file-download library this is a transparency gap, but it is not severe on its own.

Workflow auditcaution

The only workflow was fully analyzed with no injection or high-confidence audit findings, but both of its 2 action references are unpinned. That leaves avoidable build-reproducibility and action-substitution risk.