Package Health/@hey-api/json-schema-ref-parser

@hey-api/json-schema-ref-parser

The project is actively maintained and publishes with provenance, but its issue backlog is growing faster than it closes. Workflow permissions and the repository's failure to identify this package add meaningful transparency and operational concerns.

Latest 1.4.4

NPM

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Attestations

100

Health Score Breakdown

Repo issue activity

The repository is receiving new issues and pull requests, but 59 new issues versus 4 closed in the last month and 515 open issues indicate a substantial unresolved backlog.

Repo package mention

The repository name does not match the package and its README does not mention the package, so the linkage is not independently clear; although monorepo name mismatches are normal, both checks failing is a transparency concern.

Repo tooling

The project uses TypeScript, Vitest, Turbo, and npm scripts, but no security-scanning tooling was detected, leaving a modest security-process gap.

Security policy

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.

Version stability

Version 1.4.4 is a stable, non-prerelease release on a stable major line, although the recent prerelease share is reported as 100%, which weakens confidence slightly.