ampersa/json-signer
The package is small, clearly licensed, tested, and has no install-time scripts or registry deprecation. Its repository matches the package and remains unarchived, but the long absence of releases and commits leaves maintenance uncertain.
48%
Total Score
0
100
75
83
Health Score Breakdown
The latest release was in January 2019, about 7 years and 8 months ago, with no releases in the last 12 months. This is substantial abandonment risk despite five historical releases.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap and weakening confidence in ongoing maintenance.
Composer build tooling is present, but no security-scanning tools are configured. This is a modest hygiene gap rather than a severe dependency risk.
No security policy was found. For a package that signs and validates data, this is a transparency and maintenance gap, though it is not evidence of malicious behavior.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Adam Prickett |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.