smtlab/json-api-bundle

Release historydanger

The package has made no release in more than four years, with zero releases in the last 12 months. This is strong evidence of abandonment risk, despite the package not being deprecated.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with the old last push and release history, this reinforces the maintenance concern.

Repo package mentioncaution

The repository name matches the package name, supporting that it is the intended source. The README does not mention the exact package name, which is a minor transparency gap.

Repo popularitycaution

The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these values provide little evidence of an active user or contributor community.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem. No security-scanning tooling is present, a modest hygiene gap that adds to the broader transparency concern.