@standard-schema/spec

Release historycaution

The package has eight releases over about two years, but only one release in the last 12 months, indicating a slower release cadence even though the project is not new.

Repo issue activitycaution

The repository has five new pull requests in the last month, but no issues or pull requests were closed during that period, suggesting some unresolved maintenance backlog.

Repo toolingcaution

The project uses npm scripts and TypeScript for builds, but no security-scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and coordinated disclosure less clear for users of the package.

Token permissionscaution

Two workflows lack top-level token permissions and one workflow declares top-level write access, so the repository's CI permissions are not consistently minimized.