softcreatr/saloon-json-payload-contract

Release historycaution

This is a newly published package with one release and no established release cadence, so maintenance maturity cannot yet be demonstrated.

Repo commit activitycaution

There were no commits or active maintainers in the preceding three months, but the package is only zero days old, making this insufficient history rather than evidence of abandonment.

Workflow auditcaution

The workflow has read-only permissions and no untrusted checkout or script-injection findings, but all 7 analyzed action references are unpinned, leaving avoidable supply-chain exposure.