The package includes a clear README, uses MIT licensing, and has no install-time scripts. Its small scope and modest dependency set keep adoption practical.
62%
Total Score
67
100
86
75
The package has 18 releases in 243 days, but the median interval is about 10 minutes, indicating unusually bursty release activity rather than a mature cadence.
One contributor made all 4 recent commits, creating a concentrated maintenance risk; organization ownership provides some ability to hand off maintenance.
The repository had 4 commits in the last 3 months, showing some recent activity but limited maintenance capacity.
The repository has no security policy, a transparency gap for reporting vulnerabilities, though this is a minor concern for a small schema package.
Version 0.0.20 is not a stable-major release, so consumers should expect possible breaking changes while the package remains pre-1.0.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.8 | — | — |
syrtis/php-json-schema Version >=0.0.18 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.