api-platform/json-api
The component is backed by an organization and its source repository includes tests and a security policy. Its only notable weakness is that one contributor made 13 of 15 recent commits, while the single workflow uses an unpinned action.
88%
Total Score
100
93
83
Health Score Breakdown
Composer is used for builds, providing expected ecosystem tooling. No security scanning tool was detected, leaving a modest process gap but not a dependency-health failure on its own.
The one workflow uses a pull_request_target trigger without untrusted checkout or script-injection findings, but its only action is unpinned. The audit completed fully and found no higher-confidence workflow risks.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kévin Dunglas |
| API Platform Community |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/type-info Version ^7.4 || ^8.0 | — | — |
api-platform/state Version ^5.0 | — | — |
api-platform/metadata Version ^5.0 | — | — |
symfony/error-handler Version ^7.4 || ^8.0 | — | — |
api-platform/serializer Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.