sgmendez/jsonbundle
The BSD-2-Clause license, README, release notes, and small transparent file set make the package understandable to adopt. Its lack of tests, security tooling, and security policy adds maintenance uncertainty beyond the long period without updates.
38%
Total Score
25
100
72
88
Health Score Breakdown
The last release was in March 2015, and there have been no releases in the past 12 months. About 11 years without a release is strong evidence of abandonment risk.
The repository had zero commits and zero active maintainers during the last three months. Combined with the last push in 2015, this indicates prolonged inactivity.
The repository is owned by an individual rather than an organization, so there is no observed organizational backing to compensate for the thin maintenance history.
The repository has zero stars and forks and one watcher. This is weak supporting evidence of community adoption, though popularity alone does not determine package health.
Composer is used for builds, but no security-scanning tooling is present. This is a modest transparency and maintenance gap, not proof of unsafe code.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Salvador Mendez |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/framework-bundle Version >=2.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.