alcedo/json-rpc-server

Registry deprecationdanger

Packagist marks the entire package as abandoned and names rml/json-rpc-server as its replacement. This is a severe dependency risk even though the release itself is stable and the source repository is still accessible.

Release historycaution

The package has eight releases in its first year, but all were published within the first few weeks and the latest release is about 10 months old. That burst followed by a long gap weakens confidence in continued maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. This supports the abandonment concern rather than showing ongoing project care.

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not evidence of unsafe behavior by itself.

Security policycaution

The repository has no security policy. For a server library, that leaves vulnerability reporting and response expectations undocumented.