json-api-php/json-api

Release historycaution

The package has 32 releases over about 9.5 years, but none in the last 12 months and the latest release was in July 2022. This indicates a mature but inactive release line.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months, consistent with the release gap and raising maintenance-risk concerns.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That is a meaningful hygiene gap for a library with no recent maintenance activity.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, though it is not evidence of a vulnerability.

Workflow auditcaution

The workflow uses read-only permissions and has no detected audit findings, but both action references are unpinned. That leaves the build exposed to action-reference changes over time.