netresearch/jsonmapper

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated recent contribution pattern has less institutional backing to offset it.

Repo bus factorcaution

Two contributors were active recently, but the top contributor made 80% of the 5 commits. The second active contributor partly reduces, but does not eliminate, continuity risk.

Repo toolingcaution

The project uses Make and Composer, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy. That weakens the project's documented vulnerability-reporting process, though it does not by itself indicate abandonment.

Workflow auditcaution

All 3 workflows were analyzed with no audit findings or dangerous untrusted checkouts, and none grants top-level write access. However, all 9 action references are unpinned, leaving a reproducibility and action-integrity hygiene gap.