@ffmpeg-installer/ffmpeg

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, so consumers cannot independently verify how the published artifact was produced.

Release historycaution

The package has had no release in about five years, despite 22 releases overall; this is a meaningful maintenance concern for a binary-distribution package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment concerns.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, leaving little evidence of active issue handling alongside the stalled commits.

Security policycaution

The repository has no security policy, reducing transparency for reporting vulnerabilities in a package that distributes platform binaries.