Package Health

json-schema-merge-allof

Simplify your schema by combining allOf into the root schema, safely.

Latest 0.8.1NPMNPM

61%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

33

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

50

Health Score Breakdown

Release historydanger

The package has had no release for about 5 years and 7 months, with no releases in the last 12 months. Its 14-release history shows prior activity but does not offset the long current pause.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the past three months. The January 2024 push shows the repository is not abandoned outright, but current maintenance momentum is weak.

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This weakens publication transparency, though it is not a health failure on its own.

Maintainerscaution

Only one registry account has publish access, creating a thin publishing base. The linked repository is user-owned rather than organization-backed, so no provided signal compensates for that concentration.

Repo issue activitycaution

There were no new or closed issues and no new or merged pull requests in the last month, while 11 issues and 7 pull requests remain open. This suggests limited current maintenance response.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
lodash
Version ^4.17.20
—
—
compute-lcm
Version ^1.1.2
—
—
json-schema-compare
Version ^0.2.2
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
8 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform