wpkenpachi/wpdecodejson

The package is small and easy to inspect, with a README and a repository that clearly matches it. Missing security scanning and a security policy reduce transparency, while the limited project activity leaves little evidence of ongoing support.

Latest v1.0.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, with the latest published about eight years ago and no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push being in 2018. No provided signal shows compensating recent maintenance.

Dependency profile

The manifest declares one runtime dependency with the same name as the package, which may indicate a packaging or installation mistake rather than a meaningful external dependency. This warrants caution for consumers.

Repo popularity

The repository has two stars and no forks, providing little evidence of an active user or contributor community. Popularity is supporting evidence only, but it does not offset the stale activity.

Repo tooling

Composer is used for the build, which fits the ecosystem, but no security scanning tools are present. That leaves supply-chain and dependency hygiene less visible.