json-source-map

Release historydanger

The latest release was over 6 years ago, with no releases in the last 12 months; this is a meaningful maintenance concern despite the package having eight releases overall.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the maintenance concern from the long release gap.

Build provenancecaution

No build attestation or trusted-publisher provenance is present, reducing publication transparency, but this is a secondary concern for this small package.

Maintainerscaution

Only one registry account has publish access, which leaves a thin publishing base, though this administrative signal is outweighed by the matching repository and should not be treated as proof of inactivity.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no visible organizational backing to compensate for the thin maintainer and inactive-activity signals.