phptestsoft100/json100

Its minimal documentation and lack of security tooling leave little support for users. The only release is more than ten years old, and the repository does not clearly identify the package, making ongoing maintenance difficult to trust.

Latest v1.0

Packagist

30%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has exactly one release, published more than ten years ago, with no releases in the past 12 months. This is strong evidence of abandonment rather than an actively maintained dependency.

Repo commit activity

The repository has no commits or active maintainers in the past three months, consistent with its last push occurring in 2016. The long period without observed development materially raises abandonment risk.

Repo package mention

The repository name does not match the package name, and its README does not mention the package. That weakens confidence that the linked source repository is the authoritative project repository.

Repo tooling

Composer is used as a build tool, which is appropriate, but no security-scanning tooling is present. This is a modest transparency and maintenance gap.

Security policy

The repository has no security policy. For a small package this is not decisive alone, but it leaves no documented channel or process for handling vulnerabilities.