JSON Schema validation and specifications
58%
Total Score
50
100
80
100
The repository is owned by an individual rather than an organization, so there is no organizational backing signal to compensate for the single-person project context.
The package has 7 releases since 2012, but none in the last 12 months and the latest release was nearly five years ago. The README explains that the implementation is intentionally finished, which partly offsets the inactivity but does not make it suitable for current JSON Schema features.
The repository had zero commits and zero active maintainers in the last three months, confirming that development has effectively stopped. The finished-project description compensates for some expected inactivity, but not for reliance on a very old specification.
There were no new or closed issues and no pull requests merged in the last month, while 25 issues and 5 pull requests remain open. This provides little evidence of current issue resolution.
No build or security scanning tools were detected. For a tiny historical package this is not decisive, but it leaves less evidence of modern maintenance and release hygiene.
| Title | Versions | Severity |
|---|---|---|
CVE-2021-3918 json-schema is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes in versions 0.0.0 - 0.4.0. | 0.0.0 - 0.4.0 | Critical |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.