json-joy

Dependency profilecaution

The package declares 19 runtime dependencies and 30 development dependencies. The runtime footprint is substantial for a library, creating some transitive maintenance exposure, but the signal alone does not show problematic or abandoned dependencies.

Maintainerscaution

Only one registry account, streamich, has publish access. This is a genuine publishing continuity concern because the repository is user-owned rather than organization-backed, although repository activity and provenance provide compensating evidence.

Project backingcaution

The repository owner is the user account streamich, not an organization, so there is no organizational succession or maintenance-capacity evidence. This compounds the single-maintainer and bus-factor concerns.

Repo bus factorcaution

One contributor made 100% of the 12 commits in the last three months, leaving a very low observed bus factor. Because the owner is a user rather than an organization, there is no provided project-backing evidence to compensate for this concentration.

Repo commit activitycaution

The repository recorded 12 commits in the last three months, showing ongoing activity, but all were produced by one active maintainer. Activity is present but narrow.