@scalar/json-magic

A collection of utilities for working with JSON objects, including diffing, conflict resolution, bundling and more.

Latest 0.15.6

82%

Total Score

healthy

Active releases and strong repository activity support this package, but workflow credential findings and unclear package mapping reduce confidence.

Health Score Breakdown

Maintainers

Five of seven publishing accounts use the Scalar domain, consistent with the organization-backed project. hwkr (hwkr.me) and hanspagel (hanspagel.com) are outside-domain publishing accounts, which is a minor account-hygiene caution rather than evidence of limited maintenance capacity.

Repo package mention

The linked repository is organization-owned but neither matches the package name nor mentions @scalar/json-magic in its README, so the package-to-repository relationship is less transparent than expected.

Version stability

Version 0.15.6 is not a stable-major release, but it is not prerelease and recent releases contain no prerelease versions, limiting the maturity concern.

Workflow audit

All 23 workflows were analyzed, all 166 action references are pinned, and every workflow has read-only permissions. However, high-confidence blanket app-token permissions, repeated inherited secrets, and an ad hoc package install are real workflow-hygiene concerns.