dogado/json-api-server

Release historydanger

The package has five releases, but none in the last 12 months and the latest release was in December 2021. This is strong evidence of inactive release maintenance despite a previously regular interval.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That indicates limited current maintenance capacity, although the repository remains available and unarchived.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected. The repository's security policy and clean workflow audit provide some compensating transparency, though automated scanning coverage is limited.

Workflow auditcaution

All three workflows were analyzed without high- or medium-severity findings, and none use broad top-level write permissions or untrusted checkout paths. However, all 8 action references are unpinned, leaving avoidable build-reproducibility and action-substitution risk.