@stoplight/json

Build provenancecaution

No build attestation or trusted-publisher provenance was recorded for this release. That limits publication transparency, but the package still has matching source, licensing, tests, and release documentation.

Release historycaution

The package has 107 releases over more than eight years, but none in the last 12 months; its latest release was about two years ago. This established history is reassuring, while the prolonged release gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old release, this creates a meaningful risk that fixes may not arrive promptly.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, despite four open issues and 18 open pull requests. This supports the broader indication that maintenance is currently quiet.

Repo toolingcaution

The repository uses TypeScript and npm scripts for builds, but no security scanning tools were detected. The build setup is present, while the lack of scanning is a modest transparency and hygiene gap.