marussia/json-file-loader

Release historydanger

This package has had only one release, published nearly seven years ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and indicating a substantial abandonment risk.

Package scaffoldingcaution

The artifact includes a README and has a GitHub release for this version, but the README is only 18 characters and neither the package nor repository has tests or a changelog. These are meaningful transparency and maintenance gaps for a library.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. The build setup is appropriate, while the missing scanning is a minor hygiene concern.

Security policycaution

The linked repository has no security policy. This is a modest transparency gap, especially for a package that handles JSON files, though it is less significant than the absence of recent maintenance.