Package Health

eslint-json-compat-utils

A utility that converts rules made for checking the AST of `jsonc-eslint-parser` into rules compatible with `@eslint/json`.

Latest 0.2.3NPMNPM

44%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Health Score Breakdown

Name lookalikedanger

The package is reported to borrow eslint-scope's identity, with 50% artifact overlap and far fewer downloads and stable releases. That creates a serious risk that consumers wanted eslint-scope instead, despite the package's own README describing a different utility.

Project backingcaution

The source repository is owned by an individual account rather than an organization, so concentrated activity is not backed by an explicit organizational handoff structure.

Release historycaution

The package is about 678 days old with eight releases, but only two releases in the last 12 months. This indicates a modest, somewhat slow cadence rather than abandonment.

Repo bus factorcaution

All two recent commits came from one contributor, giving the project a single-person bus factor. The repository is user-owned rather than organization-backed, so there is no provided organizational compensation.

Repo commit activitycaution

Only two commits were recorded in the last three months, showing limited recent activity. The recent push and three merged pull requests in the last month partly offset this concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
esquery
Version ^1.6.0
—
—

Weekly Downloads

Info

Last Published
7 months ago
Created
1 year ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform