json-schema-to-typescript

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers have less verifiable evidence about how the published artifact was produced.

Dependency profilecaution

Eight runtime dependencies are declared for a compiler-style package, a moderate dependency surface that is usable but adds maintenance exposure.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the concentrated recent commit activity represents a real continuity concern.

Release historycaution

The package has existed for more than 10 years with 117 releases and a release as recently as August 2026, but only one release occurred in the last 12 months, indicating a slower release cadence.

Repo bus factorcaution

Commit activity is highly concentrated, with one contributor responsible for about 80% of recent commits, although 13 contributors were active and another contributor supplied about 12%.