parli/json-logger

Release historycaution

The package has only two releases, with the latest in December 2022 and none in the last three years and ten months. This is meaningful evidence of slow maintenance, although the repository was pushed more recently.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of ongoing maintenance, despite the repository not being archived.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, though the project does use Dependabot for security scanning.

Workflow auditcaution

All 10 analyzed action references are unpinned, which weakens build reproducibility; however, all three workflows were analyzed cleanly, with no untrusted checkouts, script injection, dangerous triggers, or audit findings.