@jsonquerylang/jsonquery

Release historycaution

The package has 19 releases over 746 days, but only 2 releases in the last 12 months, indicating a currently sparse cadence. Its long release history and recent 5.1.1 release provide evidence that it is not abandoned outright.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, a meaningful sign that maintenance may have slowed. The recent release and push history provide some counterevidence but do not offset the current inactivity fully.

Security policycaution

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene gap rather than evidence that the release is unsafe by itself.

Workflow auditcaution

All 4 analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkout, script injection, dangerous trigger, or high-confidence security finding, and one workflow uses read-only permissions.