fabpot/json-rpc-peer
The README is substantial, with tests, a changelog, and a clear license. Composer auditing and read-only workflow permissions add useful safeguards, while no security policy is published.
78%
Total Score
67
100
100
75
Health Score Breakdown
The repository is owned by a user account rather than an organization, so the single-person maintenance concentration is not offset by visible organizational backing.
One contributor made 100% of the 101 recent commits, concentrating maintenance knowledge and creating a meaningful continuity risk for a young package.
No repository security policy was found. That weakens the project's published process for receiving and handling security reports, although it does not show abandonment by itself.
The workflow audit completed fully with no findings, read-only permissions, and no untrusted checkout or script-injection paths. However, all 6 of 6 action references are unpinned, leaving avoidable build-reproducibility and action-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Fabien Potencier |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 amphp/amp Version ^3 | — | — |
amphp/byte-stream Version ^2 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 2 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.