json-stringify-pretty-compact

Build provenancecaution

No build attestation or trusted-publisher provenance is available. This limits publication transparency, though it is not by itself evidence that the release is unsafe.

Project backingcaution

The repository is owned by an individual rather than an organization, so the project has a relatively narrow visible backing base. This is partly consistent with the small package and does not outweigh its clear repository linkage.

Release historycaution

The package has 10 releases over roughly 12 years, but none in the last 12 months and the latest release was in May 2022. This indicates a mature, largely finished package but raises maintenance-staleness concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with no registry releases in the last year, this supports a caution about current maintenance capacity.

Repo toolingcaution

The repository reports no build tool and no security scanning tool. For this small dependency this is a hygiene gap, but the absence is not severe on its own.