beste/json

MIT licensing, documented usage, tests, release notes, and a security policy make the project transparent to adopt. Organizational ownership and lightweight dependencies help offset the narrow recent contributor base and workflow hygiene concerns.

Latest 1.7.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 10 releases since February 2022, but none in the last 12 months and its latest release was about one year ago, indicating a notably quiet release cadence.

Repo commit activity

Only two commits from one active maintainer occurred in the last three months; this shows some maintenance but a low recent activity level.

Workflow audit

Both workflows were analyzed, but all six action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; its pull_request_target trigger also warrants care despite no untrusted checkout or script injection being found.