is-my-json-valid

A [JSONSchema](https://json-schema.org/) validator that uses code generation to be extremely fast.

Latest 2.20.6

NPM

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package has a long history with 64 releases, but its latest registry release was about 4 years and 10 months ago and there were no releases in the last 12 months.

Repo bus factor

One contributor made all commits in the last 3 months, leaving recent maintenance dependent on a single active contributor.

Repo commit activity

Only one commit was recorded in the last 3 months, so recent development activity is very limited despite the repository having been pushed recently.

Repo issue activity

There are 40 open issues and 15 open pull requests, with no issues or pull requests closed in the last month, suggesting limited recent issue handling.

Repo tooling

The repository uses TypeScript tooling but reports no security scanning tools, leaving a modest security-process gap.

Vulnerabilities

Title	Versions	Severity
CVE-2018-1107 is-my-json-valid is vulnerable to Uncontrolled Resource Consumption in versions 2.0.0 - 2.17.2 and 0.0.0 - 1.4.1.	0.0.0 - 1.4.12.0.0 - 2.17.2	Medium
CVE-2016-2537 is-my-json-valid is vulnerable to Inefficient Regular Expression Complexity in versions 0.0.0 - 2.12.4.	0.0.0 - 2.12.4	High

Package versions

Maintainers

Direct Dependencies

Dependency	Last Release	Score
xtend Version ^4.0.0	—	—
jsonpointer Version ^5.0.0	—	—
is-my-ip-valid Version ^1.0.0	—	—
generate-function Version ^2.0.0	—	—
generate-object-property Version ^1.1.0	—	—