modufolio/json-api
Usable with caveats: it is actively released and maintained, with clear documentation, tests, and a matching source repository. Adoption depends heavily on one contributor, and the repository lacks security scanning and a security policy.
68%
Total Score
67
83
75
Health Score Breakdown
The package and repository share the modufolio namespace, but the repository owner is an individual account rather than an organization, so there is no organizational handoff capacity to offset the concentrated contributor base.
One contributor made 100% of the 30 commits in the last 3 months, creating a substantial continuity risk if that contributor becomes unavailable.
The repository has zero stars, forks, and watchers. The package is very young, which partly explains the lack of adoption evidence, but there is still no independent community signal.
Composer build tooling is present, but no security scanning tools were detected. This is a transparency and maintenance gap for a library with database and HTTP integration.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Maarten Thiebou |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/orm Version ^3.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
symfony/validator Version ^7.0 | — | — |
doctrine/collections Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.