A fully automated JSON:API server implementation in PHP.
55%
Total Score
caution
Usable with caveats: release and commit activity have stopped for nearly two years.
The package has had no releases in the last 12 months, and its latest release was nearly two years ago. Eight total releases show some history, but the long pause weakens maintenance confidence.
The repository recorded zero commits and zero active maintainers in the last three months. This supports the release-history concern and indicates no recent maintenance activity.
Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency gap rather than evidence that the package is unsafe to depend on.
The assessed release is 1.0.4, while the stability profile reports latest version 0.1.2 and a non-stable major line. That inconsistency is a transparency and versioning concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.8 | — | — |
psr/http-message Version ^1.0 | — | — |
doctrine/inflector Version ^2.0 | — | — |
asispts/http-accept Version ^1.0 | — | — |
illuminate/validation Version >=9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.