nadar/prosemirror-json-parser

Repo commit activitycaution

The repository recorded no commits or active maintainers in the last three months, which is a maintenance concern, though recent release activity provides some compensating evidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest gap in automated security hygiene.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, creating a modest supply-chain reproducibility concern.