Package Health

kkamkou/collection-json.php

The package includes tests, release notes, a README, and a small runtime dependency surface. Its source repository has no security policy or security scanning, so maintenance and disclosure practices are limited.

Latest 1.1.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with the release history, this indicates that active maintenance has effectively stopped.

Project backingcaution

The registry and repository are owned by the same individual account, and the repository is user-backed rather than organization-backed. This is consistent ownership, but it also indicates a limited backing structure.

Release historycaution

The latest release was published in May 2015, with no releases in the last 12 months and only two releases overall. This is strong evidence of an aging package, although the stable 1.1.0 release may still be sufficient for a mature, narrow library.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. The build tooling is appropriate, while the missing scanning is a modest transparency and maintenance gap.

Repository archivedcaution

The linked repository is not archived, but its last push was in November 2015. The unarchived state is positive, while the old last-push date reinforces the maintenance concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Kanstantsin Kamkou

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
11 years ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform