mcfedr/json-form

Release historycaution

The package has 20 releases since September 2014, but its latest release was over four years ago and there were no releases in the last 12 months. That long gap materially raises abandonment and compatibility risk.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months. Combined with the old latest release, this indicates stalled maintenance rather than an actively evolving project.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. This is a modest transparency gap for a dependency, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. The package's small scope and otherwise documented repository reduce the severity, but do not remove the gap.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-confidence audit findings. However, both of its two action references are unpinned, leaving avoidable build-supply-chain drift.