cline/json

Release historycaution

The package is 112 days old and has only one release, so its maintenance record is still unproven rather than established.

Repo commit activitycaution

There were zero commits and zero active maintainers in the past three months, which is concerning for a package whose only release was 112 days ago.

Repo toolingcaution

The repository uses Composer and Just for build tooling, but no security-scanning tools were detected, leaving a meaningful hygiene gap.

Workflow auditcaution

All eight analyzed action references are unpinned, which weakens CI reproducibility. The audit found no untrusted checkouts, injection sinks, dangerous triggers, or high-confidence workflow findings.