High-performance JSON serialization library
78%
Total Score
50
50
90
80
100
Ten runtime dependencies create a meaningful transitive dependency surface, including several project-scoped packages; this is a manageable caution rather than a severe concern because the package is substantial and actively released.
The linked repository is owned by the individual GitHub user streamich rather than an organization, so there is no organization-level maintenance handoff evidence to offset contributor concentration.
All 12 recent commits came from one contributor, giving the project a concentrated bus factor and increasing continuity risk because the repository owner is an individual rather than an organization.
There were 12 commits in the last 3 months, showing ongoing work, but only one active maintainer contributed them, limiting the strength of the maintenance evidence.
The repository has 219 open issues and 29 open pull requests, while the last month shows no new or closed issues and only limited pull-request activity; this suggests backlog or limited issue maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
thingies Version ^2.6.1 | — | — |
tree-dump Version ^1.1.0 | — | — |
hyperdyperid Version ^1.2.0 | — | — |
@jsonjoy.com/util Version 18.30.0 | — | — |
@jsonjoy.com/base64 Version 18.30.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.