remorhaz/php-json-path

Lifecycle scriptscaution

The package defines post-install and post-update Composer scripts. These increase installation complexity and supply-chain exposure, although this signal alone does not show that the scripts are unsafe.

Release historycaution

The package has 24 releases since July 2019, but its latest release was in February 2024 and it had no releases in the last 12 months. This indicates a mature history but current abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with more than two years without meaningful recent development. This materially raises abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. Build support is positive, while the missing scanning coverage is a modest transparency gap.

Security policycaution

The repository has no security policy. For a maintained library, this leaves vulnerability-reporting and response expectations undocumented.