Pure PHP command-line equivalents of jq and yq
72%
Total Score
caution
A very new 0.x package has strong recent development and documentation, but lacks a security policy and automated security scanning.
The package is only 3 days old with 2 releases, so its long-term release reliability is not yet established. Recent activity is strong but cannot compensate for the very short history.
The repository currently has no stars, forks, or watchers. This offers no maturity evidence, but popularity is supporting evidence rather than a health verdict.
Composer and Box provide build tooling, but no security-scanning tools were detected. This is a transparency and maintenance gap rather than evidence of unsafe code.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The strong recent development activity partly offsets this gap but does not remove it.
Version v0.2.0 is not a stable major release, which signals an early API and compatibility stage. It is not marked as a prerelease, providing some compensation.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.