laragear/json

The package has clear usage documentation, repository tests, release notes, and a focused dependency set. Its single-maintainer setup and missing security policy leave less operational depth than a mature project.

Latest v4.0.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry publishing account is listed. The organization-backed repository provides some continuity, but the registry still shows a narrow publishing base.

Release history

The package has existed for over four years but has only six releases, with one release in the last 12 months and a median interval of about 11 months. This indicates a deliberate but slow release cadence rather than strong ongoing activity.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although a release was pushed recently, the lack of development activity reduces confidence in ongoing maintenance.

Security policy

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not by itself evidence that the package is unsafe.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 11 action references are unpinned, leaving workflow dependencies exposed to upstream changes.