swaggest/json-schema

The package is well documented, licensed, and backed by an organization with a long release history. Its workflows use unpinned actions and the repository lacks a security policy, so pin this exact version and monitor for renewed maintenance.

Latest v0.12.43

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits or active maintainers in the last three months, indicating that current development has stopped or paused. This is the strongest abandonment concern in the available evidence.

Release history

The package has existed since January 2017 with 68 releases and a median release interval of about 15 days, but it has had no release in the last 12 months. The long-term history supports maturity, while the recent pause lowers confidence in active maintenance.

Repo issue activity

There were no new or closed issues or pull requests in the last month, alongside 22 open issues and 4 open pull requests. That suggests limited current project responsiveness.

Repo tooling

The repository uses Make and Composer, showing basic build tooling, but no security-scanning tools were detected. This is a hygiene gap rather than evidence that the release is unsafe.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented. This lowers transparency for a library used in applications.