typescript-json-schema

Build provenancecaution

No build attestation or trusted-publisher provenance is available, reducing release transparency, though this is a moderate gap rather than evidence of unsafe behavior.

Lifecycle scriptscaution

A prepare script runs during installation or package preparation, adding execution during dependency setup and modestly increasing maintenance and supply-chain exposure.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational backing to compensate for the small maintainer base or sparse recent activity.

Repo commit activitycaution

Only two commits occurred in the last three months, which is sparse, although the recent registry release shows the project has not stopped publishing.

Repo issue activitycaution

There are 179 open issues and nine open pull requests, but no issues or pull requests were opened or closed in the last month, indicating limited recent issue-management activity.