json-parse-even-better-errors

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating sparse recent maintenance even though the release and recent push show the project is not abandoned.

Workflow auditcaution

All eight workflows were analyzed, but all 38 action references are unpinned and four workflows grant top-level write permissions. High-confidence template-injection findings appear in two workflows; without an untrusted trigger or checkout sink, these remain workflow-hygiene concerns rather than standalone severe risk.