phpnomad/json-schema

The repository includes tests, a matching README, release notes, Dependabot, and a clear organization-backed project. However, it has had no commits or active maintainers in three months, and all four workflow actions are unpinned; the missing security policy is a smaller transparency gap.

Latest 1.0.1

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is young at 155 days old with only two releases, spaced about 54 days apart. This is limited maturity evidence, but not abandonment by itself.

Repo commit activity

There were zero commits and zero active maintainers during the last three months. For a young package, that is a meaningful maintenance warning even though a release was published earlier.

Security policy

The repository has no published security policy. This is a transparency and incident-handling gap, though it is less serious for a small interfaces-only package.

Workflow audit

Both workflows were fully analyzed with no injection or high-severity findings, but all four action references are unpinned. That leaves avoidable build-integrity exposure and warrants a hygiene caution.