moudarir/downloader

Release historycaution

Fourteen releases in 43 days show strong recent activity, but the package is still very young, so long-term maturity is unproven.

Repo bus factorcaution

All 23 recent commits came from one contributor, leaving maintenance highly dependent on a single person.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-maintenance gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

The sole workflow uses read-only permissions and has no detected dangerous findings, but both action references are unpinned, weakening build reproducibility.