RCF 6901 implementation of JSON Pointer
82%
Total Score
healthy
Healthy release with strong documentation, tests, and provenance; slower releases and unpinned workflow actions are the main caveats.
The package is 571 days old with 38 releases, but only two releases occurred in the last 12 months and the median interval is about 12 hours, indicating an uneven recent cadence.
Two contributors were active, but the top contributor made five of six commits. The organization-owned project and second active contributor partly compensate for this concentration.
All four workflows were analyzed with no audit findings, no untrusted checkout, and no script injection. However, all 10 action references are unpinned, and one workflow combines pull_request_target with top-level write permissions, so workflow reproducibility and least privilege are weaker than ideal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
apg-lite Version ^1.0.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.