prettier-plugin-packagejson

Project backingcaution

The repository is maintained under an individual account rather than an organization. That does not imply poor health, but it means there is no organizational backing shown by this signal.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release history and current repository push provide some compensation.

Repo toolingcaution

The repository reports no build tool and no security-scanning tool. For this small plugin this is a modest transparency and hygiene gap, not evidence of abandonment by itself.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though it does not directly indicate poor release maintenance.

Workflow auditcaution

All 4 of 4 analyzed action references are unpinned, and one workflow grants top-level write permissions. The audit found no untrusted checkout, injection, or high-confidence dangerous finding, so this is a workflow hygiene caution rather than a severe risk.