phpdocumentor/json-path

Name lookalikedanger

The package is flagged as borrowing the identity of phpdocumentor/type-resolver, which has far more downloads and releases; this creates a substantial risk that consumers choose the wrong package.

Dependency profilecaution

The package has three runtime dependencies, including PHP, Parsica, and Symfony PropertyAccess; this is a moderate dependency surface for a parser library and adds some maintenance exposure.

Release historycaution

Only three releases have been published since May 2024, with one release in the last 12 months and a median interval of about 249 days, indicating a slow cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which weakens evidence of ongoing maintenance despite a recent repository push.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap.