eslint-plugin-jsonc

Repo bus factorcaution

One contributor made about 73% of recent commits, but three additional contributors were active, making this a manageable concentration rather than a severe single-person dependency.

Repo toolingcaution

The project uses established build tooling, but no security-scanning tools were detected, leaving a modest transparency and assurance gap.

Security policycaution

The repository has no security policy, so its vulnerability-reporting expectations are less transparent to adopters.

Workflow auditcaution

The audit completed all seven workflows and found no untrusted checkout or script injection, but all 31 action references are unpinned and a high-confidence adhoc package installation was reported; the low-confidence cache concern is secondary.