parse-json

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable than it could be; this is a transparency weakness rather than evidence of unsafe code.

Maintainerscaution

A single registry publishing account is a limited publishing base, though the linked repository is maintained under the same individual ownership context.

Project backingcaution

The repository is owned by an individual rather than an organization, so the one-account publishing and ownership model offers limited redundancy.

Release historycaution

This is a mature package released over many years, but it has had no registry release in the last 12 months, which lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that active development has paused.