zonuexe/broken-json

Release historycaution

The package is 210 days old but has only two releases, both published within about six minutes, with no later release activity shown. This suggests an immature or potentially inactive release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months, despite the package being about 210 days old. This is meaningful evidence of limited ongoing maintenance.

Repo toolingcaution

The repository uses Composer and Make, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Version stabilitycaution

Version 0.1.2 is not a stable major release, indicating an early-stage API with greater compatibility risk than a mature 1.x package.

Workflow auditcaution

All 9 analyzed action references are unpinned, which weakens build reproducibility. The workflow does use read-only permissions and has no untrusted checkouts, injection findings, or other high-impact audit findings.