A drop-in replacement for JSON.parse that uses `jju` to give helpful errors
56%
Total Score
50
100
88
83
Only one registry maintainer account is listed. That is a thin publishing base and creates limited visible continuity if that maintainer stops supporting the package.
The package is about 11 years old but has only three releases, with no release in the last 11 years. That strongly limits evidence of active maintenance, though the stable 1.0.3 line may suit a small utility.
The repository had zero commits and zero active maintainers in the last three months. Combined with the old last push, this is strong evidence of inactivity.
The repository uses no build or security-scanning tools. A build system is reasonable to omit for this small JavaScript package, but the lack of security scanning reduces oversight.
No security policy is present in the repository, leaving no documented channel or process for handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jju Version ^1.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.