jojo1981/json-schema-asg

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The recent registry release partly offsets this, but the lack of current source activity is a maintenance concern.

Repo popularitycaution

The repository has 3 stars, 0 forks, and 2 watchers. Low popularity is supporting evidence rather than a verdict, but it provides little evidence of a broad review or contributor base.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build setup is established, while automated security coverage is limited.

Security policycaution

The repository has no security policy. This does not show a vulnerability, but it reduces transparency about how consumers should report and receive fixes for security issues.

Workflow auditcaution

All 3 analyzed action references are unpinned, which weakens build reproducibility. The reported cache-poisoning finding has low confidence and is hygiene at most; workflows use read-only permissions and have no untrusted checkout or script-injection findings.