Perform rapid conversation and validation of JSON structure between Postman Collection Format v1 and v2
72%
Total Score
75
100
94
67
All seven recent commits came from one contributor, creating concentration risk. Organization ownership provides some ability to hand maintenance off, so this is a caution rather than a severe abandonment signal.
Three issues were opened in the last month, but no issues or pull requests were closed and no pull requests were merged, indicating limited recent triage.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for consumers and maintainers.
No type declarations are published, which is a minor integration gap for TypeScript consumers but not a maintenance or abandonment concern by itself.
The only workflow was fully analyzed with no untrusted checkout or script-injection findings, but all 6 action references are unpinned, weakening build reproducibility and update safety.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lodash Version 4.18.1 | — | — |
semver Version 7.5.4 | — | — |
inherits Version 2.0.4 | — | — |
commander Version 8.3.0 | — | — |
strip-json-comments Version 3.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.