yoanm/jsonrpc-server-sdk

The MIT license, small dependency surface, release notes, and repository tests are reassuring. Maintenance is currently quiet, while workflows use broad write permissions and leave all five actions unpinned.

Latest v3.3.6

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

A single registry maintainer, Yoanm, indicates a thin publishing base. The linked repository is also user-owned rather than organization-backed, so there is no provided evidence of broader organizational capacity.

Release history

The package has existed since April 2018 with 25 releases and a release as recent as December 2025, but only one release occurred in the last 12 months. That suggests slower current delivery, partly offset by the recent release.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although the latest release and push were recent, the current maintenance pause raises abandonment risk.

Repo issue activity

There are two open issues and three open pull requests, but no new or closed issues or merged pull requests in the last month. This is a modest sign of limited recent activity.

Security policy

No security policy is present in the repository. For an SDK handling request and response processing, this is a transparency gap, though it is not evidence of an active security problem.