Package Health/steverobbins/magedownload

steverobbins/magedownload

The package has a small runtime dependency footprint and a source tree that matches its package name. Its missing README and security policy reduce transparency for a library that others must integrate.

Latest v1.3.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in over 10 years, with zero releases in the last 12 months. This is strong evidence that maintenance has stopped, despite a relatively regular early release cadence.

Repo commit activity

There have been no commits and no active maintainers in the last three months, with the last repository push more than 10 years ago. This is a severe abandonment concern for a dependency.

Package scaffolding

The package has a GitHub release with notes for this version, which documents the release. The absent README is a minor consumer-transparency gap, while absent tests and changelog are normal for a published artifact and are not concerns here.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of an active user or contributor community.

Repo tooling

The repository uses Composer, appropriate for this PHP package, but has no detected security-scanning tools. The missing scanning is a hygiene weakness, not evidence that the release is unsafe by itself.