json-with-bigint

Repo bus factorcaution

All 4 recent commits came from one contributor, leaving no demonstrated independent backup maintainer and increasing continuity risk.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security-scanning tools were detected, which is a modest transparency gap.

Security policycaution

No repository security policy was found, reducing clarity about vulnerability reporting and maintenance response.

Workflow auditcaution

The only workflow has two unpinned action references and a low-confidence cache-poisoning finding. The audit is complete, and there are no untrusted checkouts, script injections, or broad top-level write permissions, so this is workflow hygiene rather than a severe risk.