@json-render/core

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting guidance less transparent; active maintenance and security scanning partly compensate but do not remove the gap.

Version stabilitycaution

Version 0.21.1 is not a stable major release, so compatibility may change before 1.0; it is not a prerelease and recent releases contain no prerelease versions.

Workflow auditcaution

Both workflows were analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings, and one workflow uses read-only permissions. However, all 20 action references are unpinned, which weakens build reproducibility.