yiisoft/response-download
The package is well documented and licensed, with repository tests, release notes, and a security policy. Two active contributors and recent commits support continued maintenance; pin this version because registry releases are infrequent.
86%
Total Score
100
100
94
100
Health Score Breakdown
Only two releases exist across about 3 years 6 months, with a median gap of about 3 years 1 month. A release in the last 12 months and recent repository activity partly compensate, but the registry cadence remains slow.
All eight workflows were analyzed successfully, use read-only permissions, and have no untrusted checkouts, injection findings, or high-confidence audit findings. However, all eight action references are unpinned, leaving a reproducibility and action-supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/http Version ^1.2 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0|^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.