@jsonjoy.com/fs-node

Project backingcaution

The source owner is an individual rather than an organization, so the concentrated commit share is not offset by clear organization-level handoff capacity.

Repo bus factorcaution

Although three contributors were active, one contributor made about 90% of recent commits, leaving maintenance concentrated and increasing continuity risk.

Repo toolingcaution

The project uses TypeScript and npm scripts, but no security scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.

Workflow auditcaution

All three workflows were analyzed without trigger or untrusted-checkout sinks, but all five action references are unpinned and a high-confidence audit found an adhoc package installation; the release workflow also has top-level write permissions.