2026 Q4 maintenance update
Published 2026-10-11.
Shipped
- released the template as
v0.4.18, create-jst as 0.4.19, and the architecture plugin as 0.4.4;
- added organization governance, support, security, funding, issue, review, and AI-contribution policies;
- enabled protected branches and release tags, dependency review, CodeQL, provenance-backed npm publishing, and release canaries;
- verified clean generation with npm and pnpm on Linux, macOS, and Windows;
- repaired the showcase browser matrix and calibrated policy benchmarks against hosted-runner variance;
- added adversarial policy, CLI, migration, and project-name validation;
- added compatibility-release automation and a canonical documentation and project-health site;
- published the first-production-feature tutorial, troubleshooting path, comparisons, roadmap, and sponsor proposition.
Health snapshot
- npm downloads observed on 2026-10-10: 2,542 for
create-jst and 1,609 for @jst-stack/eslint-plugin over the preceding month;
- OpenSSF Scorecard improved from 5.7 to 6.9;
- repository Community Health: 87% for
jst, 100% for create-jst, eslint-plugin, and jst-showcase;
- active maintainers: one; first external contributor: @sudo0m, who added the pnpm path to the first-feature tutorial;
- shared project expenses reported for this period: $0.
Next
- complete GitHub Sponsors onboarding and publish the first funding goal;
- improve independent-review and OpenSSF signals without weakening the single-maintainer recovery path;
- collect real adopter feedback and publish stories only with explicit permission;
- keep compatibility pull requests and release evidence current across the plugin, template, CLI, and showcase.