The package is small and clearly identified, with tests, an MIT license, and no install scripts. Its repository matches the package, but the project has been inactive for more than 11 years, making long-term compatibility and support a liability.
43%
Total Score
75
100
63
83
The package has had no release in more than 11 years: its latest release was January 9, 2015, with no releases in the last 12 months. This is strong evidence of abandonment despite four historical releases.
The repository is not marked archived, but it was last pushed on January 9, 2015. That prolonged inactivity materially increases abandonment risk.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is consistent with the long period without releases, though zero activity alone is not decisive.
The repository has one star and one fork, indicating limited adoption. Popularity is only supporting evidence, but it provides little external maintenance signal here.
The project uses Composer for its build and dependency tooling. No security scanning is configured, which is a minor hygiene gap for an old project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
justinrainbow/json-schema Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.