dcarbone/json-to-go
The MIT license, matching repository, and release notes provide useful transparency for consumers. Its small audience, absent security scanning, and thin support evidence make long-term maintenance uncertain.
42%
Total Score
0
75
50
Health Score Breakdown
The package has had no release in about 9 years, despite 43 historical releases. That prolonged inactivity is strong evidence of abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating no current maintenance.
The repository has only 2 stars, 0 forks, and 1 watcher. Low adoption is supporting evidence of limited project maturity, but does not independently establish that the package is unsafe to use.
Composer is used for the build, but no security scanning tools are configured. That reduces supply-chain hygiene for a package with no recent maintenance activity.
The repository has no security policy, leaving no documented channel or process for handling vulnerabilities. This is a transparency gap, though it is secondary to the maintenance concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Carbone |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version @stable | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.