webmozart/json
Documentation, tests, and release notes are strong, and the repository remains available with a matching package. Maintenance has effectively stopped: the last release was about 10 years ago and repository activity about 5 years ago, so pinning this version carries update risk.
61%
Total Score
50
100
75
83
Health Score Breakdown
The package has 10 releases, but its latest release was about 10 years ago and there were no releases in the last 12 months, which materially raises abandonment and compatibility risk.
There were no commits and no active maintainers in the last 3 months, and the last repository push was about 5 years ago; this is the strongest ongoing-maintenance concern.
One registry account has publish access. This is a limited publishing base, but the matching repository and project evidence provide some compensation.
There are seven open issues and five open pull requests, but no issues or pull requests were created or merged in the last month, consistent with inactive project maintenance.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Bernhard Schussek |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 seld/jsonlint Version ^1.0 | — | — |
webmozart/path-util Version ^2.3 | — | — |
justinrainbow/json-schema Version ^1.6 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.