8ctopus/relaxed-json

Clear MIT licensing, tests, a matching repository, and only one runtime dependency make the package straightforward to adopt. The main concern is whether maintenance will continue, with limited recent activity and weak workflow and security hygiene.

Latest 1.0.4

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Five releases over roughly three years, with one release in the last 12 months, show an established but relatively slow release cadence.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance, although the latest push aligns with the latest release.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policy

The repository has no security policy, so there is no stated process for reporting or handling vulnerabilities.

Workflow audit

Both workflows were analyzed without dangerous triggers or audit findings, but all nine action references are unpinned, reducing build reproducibility and supply-chain hygiene.