deng/phptojson
Its tiny three-file footprint offers little evidence of mature testing or security practice. The source is not archived and has no install scripts, but that does not offset the long inactivity.
40%
Total Score
0
38
Health Score Breakdown
The package has only one release, published about eight years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating no visible current maintenance.
No license is declared, detected, or included in either the package or repository. That creates a material adoption and redistribution risk.
The package includes a README, but it is only 11 characters long and provides little integration guidance; no tests or changelog are present, while release notes do document this exact version.
Composer is used for the build, which is positive, but no security-scanning tooling is reported. Given the package's otherwise minimal project evidence, this leaves a transparency gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 dengweixiong |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.