sunaoka/ndjson

Project backingcaution

The registry and repository are owned by the same individual, and the repository is clearly linked to the package. There is no organization backing to offset the single-maintainer concentration.

Repo bus factorcaution

All two recent commits came from one contributor, so maintenance depends on a single person. The active recent contributor and small project scope partly compensate, but concentration remains a real resilience concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a small library this is a moderate transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a modest maintenance and transparency gap.