JSON files on your hands!
18%
Total Score
critical
The package is deprecated and its source repository is archived, with no releases or commits for years.
Packagist marks the package abandoned and recommends webmozart/json as a replacement. Package-level deprecation is a severe warning against taking a new dependency on this release.
The latest release was in December 2019, with no releases during the last 12 months despite the package being nearly seven years old at collection time. This indicates prolonged release inactivity.
The repository recorded zero commits and zero active maintainers in the last three months. This reinforces the evidence that maintenance has stopped rather than merely slowed.
The linked repository is archived, and its last push was in September 2021. An archived source project presents a strong abandonment risk for future fixes and compatibility work.
The project uses Composer but reports no security-scanning tooling. This is a minor hygiene gap, not evidence of maliciousness or a decisive risk on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
machitgarha/json Version ^1.0.2 | — | — |
webmozart/path-util Version ^2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.