Generate positions for values in JSON and JSON5 strings
57%
Total Score
caution
Usable with caveats: no release or repository activity for about three years.
The repository had no commits and no active maintainers in the last three months; together with the old last push, this indicates inactivity rather than active maintenance.
The registry namespace and repository are owned by the same individual account, which supports package identity but does not provide organizational maintenance capacity.
Only two releases have been published, with no releases in the last three years and a median interval of about 528 days, indicating a very slow maintenance cadence.
There were no new or closed issues or pull requests in the last month, and none remain open. This is consistent with a small, quiet project but provides no evidence of ongoing support.
The repository uses TypeScript, Parcel, and npm scripts, showing a defined build process, but no security-scanning tooling was detected.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
json5 Version ^2.2.1 | — | — |
@lezer/lr Version ^1.0.0 | — | — |
@lezer/common Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.