load-json-file

Release historycaution

The package has had no releases in the last 12 months, and its latest release was about five years ago. Its 15-release history shows prior maintenance, but the current cadence lowers confidence in ongoing upkeep.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent push timestamp is a compensating sign that the repository still exists, but it does not demonstrate sustained development.

Repo toolingcaution

No build tool or security scanning tool was detected. For this small, dependency-free package that is a modest transparency gap rather than a severe risk.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned. The absence of a top-level permissions block is acceptable on its own.