json5

Build provenancecaution

No build attestation or trusted-publisher provenance is available for this release. The matching source repository and reproducible-looking package structure compensate somewhat, but publication origin is less independently verifiable.

Release historycaution

The package has existed since 2012 with 27 releases, but it has had no release in more than three years and none in the last 12 months. That indicates a mature, possibly stable project, but also raises maintenance concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the long release gap, this is the main abandonment risk, although the package's mature stable state partly offsets it.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and 28 issues and 11 pull requests remain open. This suggests limited recent maintenance activity.

Repo toolingcaution

The repository uses Rollup and npm scripts for builds, but no security scanning tools were detected. The established build tooling is positive, while the missing scanning coverage is a modest transparency gap.