json-stream-stringify

Project backingcaution

The repository is owned by a user rather than an organization, so the concentrated contributor activity and single registry maintainer provide less institutional backup.

Repo bus factorcaution

Two contributors are active, although one accounts for 75% of recent commits; the concentration is a modest resilience concern for this user-owned project.

Security policycaution

No security policy was found, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

All 17 action references are unpinned, and the audit found high-confidence template-injection findings plus an ad hoc package install; however, there are no untrusted checkout or script-injection paths, so these are workflow-hygiene concerns rather than standalone severe risks.