knplabs/php-json-schema

The MIT license, focused dependency set, and matching repository make the package straightforward to inspect and adopt. Release notes and organization backing help, but there is little evidence of ongoing validation.

Latest v0.1.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package is reported to borrow the identity of knplabs/knp-snappy, a much more established package, despite zero artifact overlap and no README identification as a fork. Consumers may have intended the lookalike package instead, creating a serious supply-chain adoption risk.

Release history

The package has had no release in nearly four years: its latest release was October 2022, with no releases in the last 12 months. The nine-release history shows initial activity but not continued maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. The repository was pushed in February 2024, but that does not demonstrate current maintenance.

Security policy

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance gap, though not independently disqualifying.

Version stability

v0.1.0 is not a stable major release, and 44% of recent releases were prereleases. This indicates a less mature compatibility commitment than a stable major version.