Package Health

softcreatr/jsonpath

JSONPath implementation for parsing, searching and flattening arrays

Latest 2.1.0PackagistPackagist

82%

Total Score

healthy

Healthy: regular releases, a current repository, and strong package documentation outweigh limited contributor activity and workflow pinning gaps.

Health Score Breakdown

Repo bus factorcaution

All recent commits came from one contributor, giving a 100% top-contributor share. The repository is user-owned rather than organization-owned, so there is no provided organizational backing to offset this concentration.

Repo commit activitycaution

The repository recorded 1 commit from 1 active maintainer in the last 3 months. Recent release activity compensates for the low raw commit count, but this still indicates limited observed development capacity.

Security policycaution

No repository security policy was found. This is a transparency gap for a library, but it is not evidence of unsafe code and is outweighed by the project's tests, tooling, and release documentation.

Workflow auditcaution

All 3 workflows were analyzed with no failed files, dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 7 action references are unpinned, leaving a reproducibility and dependency-integrity hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Stephen Frank
Sascha Greuel

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
9 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform