darkterminal/jsonconnection

Release historydanger

The package has only one release, and its latest release was published over eight years ago with no releases in the last 12 months. This is strong evidence of an unmaintained dependency.

Repository archiveddanger

The repository is not formally archived, but it was last pushed over eight years ago, which does not compensate for the absence of recent releases. The observed repository inactivity remains a serious maintenance concern.

Repo issue activitycaution

There are no open issues or pull requests and no activity in the last month. While a clean tracker can be benign, combined with the old release history it provides no evidence of active support.

Repo popularitycaution

The repository has only 3 stars, 1 fork, and 1 watcher, indicating limited external adoption or review. Low popularity is supporting caution rather than decisive evidence by itself.

Repo toolingcaution

Composer is used as a build tool, which fits the package ecosystem, but no security scanning tooling is present. This is a modest transparency and maintenance gap, not a standalone reason to reject the package.