sonsofphp/json

Usable with caveats: the package is small, clearly backed, licensed, tested in its repository, and not deprecated. However, its latest registry release was nearly two years ago and the repository shows no commits or active maintainers in the last three months.

Latest v0.3.10

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has 24 releases over more than four years, but it has had no release in the last 12 months and its latest release was nearly two years before collection. This is a meaningful maintenance concern, though the prior release cadence was reasonably regular.

Repo commit activity

The repository recorded no commits and no active maintainers during the three months before collection. Although it was pushed more recently, the lack of current commit activity supports caution about ongoing maintenance.

Repo tooling

The repository uses Composer build tooling, but no security scanning tools were detected. For this small PHP wrapper this is a hygiene gap rather than a severe risk, especially because other repository transparency signals are present.

Version stability

Version 0.3.10 is not a prerelease, and recent releases have not been dominated by prerelease versions. The pre-1.0 major version leaves some compatibility uncertainty, but it is not itself a severe risk.