oilstone/json-api

The package is licensed, has a substantial source tree, repository tests, and only two runtime dependencies. Its stable release and matching repository support adoption, but ongoing maintenance is not demonstrated.

Latest v2.0.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has six releases since June 2019, but none in the last 12 months and the latest release was in April 2022. This is strong evidence of an aging, inactive release line.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the repository having stopped changing after April 2022. This materially raises maintenance and abandonment risk.

Project backing

The registry namespace and repository are owned by the same individual account, providing direct ownership consistency but no organizational backing to compensate for the inactive project.

Repo tooling

The repository uses Composer for builds, but no security scanning tools were detected. The missing scanning is a modest transparency gap, especially for a package that has otherwise been inactive.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a maintenance and transparency gap, though not evidence of a vulnerability.