koriym/json-schema-faker

Tests in the source repository, release notes for this version, and a clear MIT license improve confidence for adopters. The small release history, three-month quiet period, and unpinned workflow actions leave moderate maintenance and build-hygiene concerns.

Latest 0.3.2

Packagist

76%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed since 2019, but only eight releases and one release in the last 12 months indicate a slow cadence. The latest release is recent enough that this is a moderate concern rather than evidence of abandonment.

Repo commit activity

There were no commits and no active maintainers in the last three months. The same-day release push shows recent activity, but the short-term gap still warrants caution about ongoing maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a repository-hygiene limitation, not evidence that the package is unsafe.

Workflow audit

All three workflows were analyzed with no audit findings, no untrusted checkouts, and no script injection. However, all four action references are unpinned, so workflow dependencies are less reproducible and should be treated as a mild hygiene concern.