Package Health/shyim/composer-binary-downloader

shyim/composer-binary-downloader

It has a substantial README, repository tests, a matching source repository, and a clear MIT license. Its short release history, pre-1.0 version, unpinned workflow actions, and lack of security documentation leave limited evidence for long-term dependability.

Latest 0.1.0

Packagist

72%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package is only 48 days old and has one release, so there is little historical evidence of sustained maintenance or release reliability.

Repo tooling

The project uses Composer, but no security scanning tool was detected. For a Composer plugin that downloads platform-specific binaries, this leaves a meaningful transparency gap.

Security policy

The repository has no security policy. That is a maintenance and disclosure gap for a plugin that downloads and installs external binaries.

Version stability

Version 0.1.0 is not a stable major release, indicating an early API and maintenance stage despite not being marked as a prerelease.

Workflow audit

The single workflow was fully analyzed with no audit findings or untrusted triggers, but all 3 referenced actions are unpinned, weakening build reproducibility and supply-chain hygiene.