stechstudio/laravel-zipstream
The README, source tests, and release notes support straightforward integration and maintenance. The organization backing helps offset the single registry publisher, but the missing security policy and weak workflow pinning leave modest concerns.
82%
Total Score
88
100
50
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. The recent release and push provide some compensation, but this still leaves a maintenance-activity concern.
The repository has no published security policy. For a package handling streamed files and external storage, this reduces transparency around vulnerability reporting.
The only workflow was fully analyzed with no untrusted checkouts, injection findings, or high-severity findings. However, both action references are unpinned, which is a modest reproducibility and supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Joseph Szobody |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^2.6 | — | — |
psr/http-message Version ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
maennchen/zipstream-php Version ^v3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.