ohm-js

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The strong release history and recent repository push partly offset this, but the current pause raises a real maintenance concern.

Repo issue activitycaution

The repository has 40 open issues and 8 open pull requests, but no issues or pull requests were opened, closed, or merged in the last month; this is a modest maintenance concern.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected; the missing scanning is a transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance unclear for a package used as a parsing library.

Token permissionscaution

Two of three workflows do not declare top-level token permissions, which is weaker least-privilege hygiene, although none declares top-level write permissions and one uses read-only permissions.