@peculiar/json-schema

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a maintenance concern, although the same period includes a current release and six merged pull requests.

Repo toolingcaution

The repository uses TypeScript, Vitest, npm scripts, and a build tool, but no security scanning tools were detected. The testing and build tooling provide useful project structure; the missing scanning is a minor hygiene gap.

Security policycaution

No repository security policy was detected, reducing the transparency of vulnerability reporting and maintenance expectations.

Workflow auditcaution

All three workflows were analyzed with no reported audit findings and no untrusted checkout or script-injection paths. However, all nine action references are unpinned and one workflow has top-level write permissions, creating workflow reproducibility and least-privilege concerns.