@jsonjoy.com/fs-node-to-fsa

Repo bus factorcaution

Although three contributors were active, one made about 90% of recent commits, leaving maintenance highly concentrated despite the presence of other contributors.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than an abandonment signal.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings. However, all five action references are unpinned, one workflow has top-level write permissions, and a high-confidence low-severity finding reports package installation outside a lockfile.