api-platform/json-hal

The organization-backed project has recent registry releases, a clear README, and a security policy. However, the source repository recorded no commits in the last three months, and this split package should be replaced as directed by its registry metadata.

Latest v4.2.0-alpha.3

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

100

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned and names api-platform/hal as its replacement. This is a direct adoption risk even though the repository remains available.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This weakens evidence of ongoing source maintenance, despite recent package publication.

Workflow audit

The sole workflow was fully analyzed with no audit findings and no untrusted checkout or script-injection paths. Its one action is unpinned, which is a limited reproducibility and supply-chain hygiene concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Kévin Dunglas

API Platform Community

Direct Dependencies

Dependency	Last Release	Score
symfony/type-info Version ^7.3	—	—
api-platform/state Version ^4.1.11	—	—
api-platform/metadata Version ^4.1.11	—	—
api-platform/serializer Version ^4.1.11	—	—