eslint-plugin-json

Repo bus factorcaution

All recent commits come from one contributor, leaving maintenance highly dependent on a single person and increasing continuity risk.

Repo commit activitycaution

One commit was made in the last three months by one active maintainer, showing recent activity but a very thin maintenance cadence.

Repo toolingcaution

No build tool or security scanning tool was detected. This is a modest transparency and engineering-hygiene gap, though the repository otherwise contains tests and active release evidence.

Security policycaution

The repository has no security policy. This weakens the project's documented process for handling vulnerabilities, but it is not evidence of abandonment by itself.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, script injection, or audit findings, but all 3 action references are unpinned, leaving them exposed to reference changes.