php-alchemist/json

Release historycaution

This package has made only one release, about 15 months ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance and makes the release history a meaningful concern.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months. Combined with a single release and no releases in the last year, this is evidence of limited recent maintenance.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although the presence of automated security scanning partly offsets the concern.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings. However, all three action references are unpinned, leaving a modest reproducibility and supply-chain hygiene weakness.