json-parse-better-errors

Build provenancecaution

The release has no build attestation or trusted-publisher provenance. This weakens publication transparency, although the package is simple and contains no runtime dependencies.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational backing to compensate for the thin maintenance base. The linked repository nevertheless matches the package.

Release historycaution

The package has had 3 releases, but the latest was 8 years ago and there were no releases in the last 12 months. This substantially lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. Combined with the old registry release, this indicates uncertain ongoing maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with 2 open issues and 3 open pull requests. This suggests limited current project activity.