karriere/json-decoder
The package is licensed, documented, tested in its repository, and publishes clear release notes. CI is complete but uses two unpinned actions, while no security policy or scanning is present.
72%
Total Score
75
100
88
67
Health Score Breakdown
The package has been maintained since 2017 with 22 releases, but only one release appeared in the last 12 months and the latest was about seven months ago. This supports maturity but indicates a slower current cadence.
There were no commits and no active maintainers in the last three months. Combined with only one release in the last year, this is a meaningful sign of currently limited maintenance activity.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap.
The repository has no security policy. For a library handling application data, this makes vulnerability reporting and response expectations less transparent.
The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both of its two action references are unpinned. That leaves avoidable build-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alexander Lentner |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 php-di/phpdoc-reader Version ^2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.