xp-forge/json

Release historycaution

The package has existed for over 11 years with 30 releases, but only one release in the last 12 months and a median interval of about 102 days indicate a modest cadence.

Repo bus factorcaution

All five recent commits came from one contributor, creating a meaningful continuity risk; organization ownership provides some ability to hand off maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving security hygiene less independently verifiable.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and maintenance response.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings, but all three action references are unpinned, leaving action versions less reproducible.