Its README, tests, MIT declaration, and Composer setup provide a usable foundation. However, there is no security policy or scanning, and the single-person project has little adoption evidence.
42%
Total Score
38
100
72
83
This is the package's only release, published over 7 years ago, with no releases in the last 12 months; that strongly increases abandonment risk.
There were no commits and no active maintainers in the last 3 months, indicating that maintenance has effectively stopped.
Only one registry publishing account is listed, leaving limited visible publishing redundancy; the linked repository is also owned by an individual rather than an organization.
The package and repository are aligned under the same individual owner, supporting identity consistency, but there is no organization backing to add maintenance capacity.
There are no open issues or pull requests and no recent activity; this is neutral by itself because it may reflect a small, unused project, but it does not provide maintenance evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
justinrainbow/json-schema Version ^5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.