joelwurtz/json-stream

The package has tests, clear usage documentation, release notes, a matching MIT license, and 27 recent commits. Its single-maintainer base, pre-1.0 status, and weak workflow pinning leave less margin for long-term maintenance and reproducible builds.

Latest 0.1.0

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is a 54-day-old package with only one release, so there is limited evidence of release maturity or sustained maintenance.

Repo bus factor

All 27 recent commits came from one contributor, so maintenance depends entirely on a single person.

Security policy

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented.

Version stability

Version 0.1.0 is not a stable major release, which signals an API and maintenance surface that may still change substantially.

Workflow audit

The workflows were fully analyzed with no untrusted checkout or script-injection findings, but all 9 action references are unpinned and a high-confidence finding identifies a container using the floating latest tag.