strip-json-comments

Release historycaution

The package is mature, with 20 releases over more than 12 years, but there were no releases in the last 12 months. The long history and recent 5.0.3 release reduce the concern, but the current pause warrants caution.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the lack of releases over the last year. The package may be stable, but current maintenance capacity is not demonstrated.

Repo toolingcaution

The repository uses build tooling, but no security scanning tool was detected. This is a transparency and defense-in-depth gap, not evidence that the package is unsafe.

Token permissionscaution

The only workflow does not declare top-level token permissions. No write permissions were observed, but the missing explicit declaration leaves permissions less constrained than ideal.