remorhaz/php-json-data

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during dependency operations, increasing installation complexity and supply-chain exposure compared with a package that has no lifecycle hooks.

Release historycaution

The package has a long history and 16 releases, but no release occurred in roughly two years, which points to reduced ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, reinforcing the evidence that development has paused.

Repo issue activitycaution

There are no new or closed issues in the last month and two open pull requests, suggesting limited recent project interaction.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a gap in repository security hygiene.