The artifact includes a README, license, release notes, and no install-time scripts. Its last registry release was over four years ago, and there has been no recent commit activity, leaving no active maintenance path.
12%
Total Score
25
100
56
83
Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning against taking a new dependency on it.
The package has only four releases since December 2016, with no releases in the last 12 months; the latest release was in April 2022. This indicates a long-standing lack of release maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. This provides no evidence of ongoing maintenance capacity.
The linked source repository is archived, which indicates the project is no longer maintained despite being pushed in September 2024. Archival status is a severe abandonment concern.
One issue and one pull request remain open, with no new or closed activity in the last month. This is a smaller concern than the archived and abandoned status but reinforces the lack of active upkeep.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
justinrainbow/json-schema Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.