JSONPath implementation for parsing, searching and flattening arrays
82%
Total Score
healthy
Healthy: regular releases, a current repository, and strong package documentation outweigh limited contributor activity and workflow pinning gaps.
All recent commits came from one contributor, giving a 100% top-contributor share. The repository is user-owned rather than organization-owned, so there is no provided organizational backing to offset this concentration.
The repository recorded 1 commit from 1 active maintainer in the last 3 months. Recent release activity compensates for the low raw commit count, but this still indicates limited observed development capacity.
No repository security policy was found. This is a transparency gap for a library, but it is not evidence of unsafe code and is outweighed by the project's tests, tooling, and release documentation.
All 3 workflows were analyzed with no failed files, dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 7 action references are unpinned, leaving a reproducibility and dependency-integrity hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.