estahn/phpunit-json-assertions
Clear documentation, tests, and a permissive license make integration straightforward. The source repository is not archived and uses security scanning, but its release cadence and workflow pinning need attention.
60%
Total Score
75
100
94
67
Health Score Breakdown
The latest release was published in June 2021, with no releases in the last 12 months. The repository was pushed more recently, which partly offsets the stale registry cadence but not the lack of current releases.
There were no commits and no active maintainers in the three months measured, which supports concern about current maintenance even though the repository had a more recent push.
The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a minor transparency gap for an otherwise established project.
All 8 analyzed action references are unpinned, and the audit found a high-confidence unpinned container image. There are no untrusted checkouts or script-injection findings, so this is a hygiene concern rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Enrico Stahn |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mtdowling/jmespath.php Version ^2.3 | — | — |
justinrainbow/json-schema Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.