Package Health/data-govt-nz/silverstripe-datajson

data-govt-nz/silverstripe-datajson

The package is licensed and tied to an organization-owned repository, with no install-time scripts or registry deprecation. Its tiny footprint and missing security tooling leave little evidence that it is ready for production use.

Latest 0.1.0

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published about eight years ago, with no releases in the last 12 months. That leaves substantial abandonment and compatibility risk.

Repo commit activity

The repository has recorded no commits or active maintainers in the last three months, and its last push was in 2018. This strongly limits confidence that defects or compatibility issues will be addressed.

Package scaffolding

The artifact includes a README and release notes, but the notes explicitly say it is not production ready and invite work toward 1.0.0. The absence of tests is normal for a published artifact, so it is not treated as a separate gap.

Repo tooling

Composer is used for the build, but no security-scanning tooling was detected. This is a transparency and maintenance gap, though it is less serious than the lack of recent development.

Security policy

The linked repository has no security policy, so consumers have no documented reporting process. This lowers transparency but does not by itself show that the package is unsafe.