primipilus/downloader

Release historydanger

The package has had no release in more than eight years: its latest release was January 17, 2018, with zero releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. No compensating recent maintenance activity is provided.

Maintainerscaution

Only one registry account has publish access, and the repository is user-owned rather than organization-backed. This creates a thin operational base, especially alongside the absence of recent commits.

Repo popularitycaution

The repository has zero stars, one fork, and one watcher. Popularity is not required for health, but these very low adoption signals provide little evidence of a broad support or review community.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are detected. That limits automated coverage for dependency and repository risks.