csvtojson

Build provenancecaution

No build attestation or trusted-publisher identity was detected. This weakens release transparency, although it does not by itself make the release unfit.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This is a meaningful maintenance concern, even though registry releases continue.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests in the last month, alongside 91 open issues and 29 open pull requests. This suggests limited recent project follow-through.

Repo toolingcaution

The project uses TypeScript, webpack, npm scripts, and Babel, but no security scanning tools were detected. The missing scanning is a moderate transparency and maintenance gap, not evidence of maliciousness.

Security policycaution

The repository has no published security policy. Consumers have no documented process for reporting or handling vulnerabilities.