Package Health

litstack/file-downloads

Usable with caveats: the package is stable, licensed, transparently backed by the matching Litstack organization, and has no install-time scripts, but it has had no release or commit activity for over three years. Its tiny user footprint and lack of security policy increase maintenance risk.

Latest v1.3PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, indicating that maintenance has effectively stopped recently and increasing abandonment risk.

Release historycaution

The package has four releases since March 2022, but none in the last 12 months and its latest release was over three years ago. This is a meaningful sign of possible abandonment for a dependency.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the stale activity.

Repo toolingcaution

Composer build tooling is present, showing a basic build setup, but no security scanning tools are configured, leaving a transparency and maintenance gap.

Repository archivedcaution

The linked repository is not archived, but its last push was over three years ago; the non-archived status is positive while the age of the last update remains consistent with the maintenance concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

jannescb

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
3 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform