norkunas/youtube-dl-php

The package is clearly licensed, has repository tests, release notes for this version, and no install-time scripts. Its release history remains steady, but repository activity has stopped since May and the workflow uses unpinned actions.

Latest v2.14.1

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the release history shows the project was still publishing releases during the broader year.

Repo issue activity

There were no new or closed issues or pull requests in the last month, and no pull requests were merged. Together with zero recent commits, this indicates limited current project activity.

Repo tooling

The project uses Composer, but no security scanning tools were detected. This is a transparency and hygiene gap, not evidence that the release is unsafe by itself.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a modest transparency gap for a maintained library.

Workflow audit

The single workflow was fully analyzed with no high- or medium-severity findings and no untrusted checkout or injection issues. However, all 12 action references are unpinned, which leaves the CI supply chain exposed to moving action versions.