Package Health

@parcel/transformer-json

Latest 2.16.4NPMNPM

64%

Total Score

caution

Usable with caveats: three months without commits and all 49 workflow actions are unpinned.

Health Score Breakdown

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable. The package's established release history provides some compensating evidence.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. This is a meaningful recent maintenance gap despite the package's long release history.

Repo issue activitycaution

The repository still receives issues and pull requests, but only 3 issues and 3 closures occurred in the last month, while no pull requests were merged; this indicates limited current throughput.

Repo package mentioncaution

The repository name does not match this subpackage and its README does not mention the package, so ownership is somewhat less transparent; the organization-backed monorepo context partly compensates.

Security policycaution

No repository security policy was found. This is a transparency gap for reporting vulnerabilities, although it is not evidence that the package is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
json5
Version ^2.2.3
—
—
@parcel/plugin
Version 2.16.4
—
—

Weekly Downloads

Info

Last Published
8 months ago
Created
7 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform