danharper/laravel-jsonx
A single maintainer and no security policy reduce confidence, while the package remains small and well documented. Its code is tested and licensed, but the long release silence makes this version a risky long-term dependency.
45%
Total Score
25
100
83
75
Health Score Breakdown
The package has had no releases in the last 12 months, and its latest release was about 10 years and 10 months ago. This is strong evidence of abandonment risk despite the package not being deprecated.
The repository recorded zero commits and zero active maintainers in the last 3 months. That recent inactivity reinforces the long release gap and leaves little evidence of ongoing maintenance.
Only one registry maintainer is listed, which limits visible publishing capacity. The linked repository is owned by the same individual, so this is a modest concern rather than evidence of a detached package.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, though it is less significant than the package's prolonged inactivity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dan Harper |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 danharper/jsonx Version ^0.1.0 | — | — |
illuminate/http Version >=4.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.