High-performance JSON Pointer implementation
82%
Total Score
50
100
89
75
100
The package uses the @jsonjoy.com namespace, but the linked repository is owned by the individual user streamich rather than an organization; this provides no organizational backing to offset the concentrated maintainer activity.
A single contributor accounts for 100% of recent commits, creating a meaningful continuity and bus-factor risk; the repository owner is an individual rather than an organization, so no organizational handoff evidence compensates for it.
There were 12 commits in the last 3 months, demonstrating ongoing work, but only one active maintainer contributed them, limiting evidence of maintenance breadth.
The repository has 219 open issues and 29 open pull requests, while no issues were closed in the last month; the recent pull-request merges provide some activity but the backlog and closure stagnation remain a maintenance caution.
The repository name does not match the package name and its README does not mention the package, raising a genuine concern that the linked repository may not clearly back this release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@jsonjoy.com/util Version 18.30.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.