digitalbazaar/json-ld

Release historydanger

The package has only two releases since April 2016, with no release in more than three years. That unusually sparse cadence raises abandonment concerns for a library dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This confirms that maintenance is currently dormant rather than merely slow in the registry.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with four issues still open. This is consistent with the observed lack of recent commits and adds modest maintenance concern.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security scanning tools were detected. The missing scanning coverage is a modest transparency and maintenance gap.

Security policycaution

The linked repository has no security policy. This does not prove a security problem, but it reduces transparency about how dependency vulnerabilities are reported and handled.