@jsonjoy.com/fs-node-utils

Repo bus factorcaution

One contributor made about 90% of the last three months' commits. Two other contributors remained active, but the high concentration still creates continuity risk.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention this package, so the package-to-source relationship is not clearly demonstrated. The monorepo structure provides context, but the missing explicit mention remains a transparency caution.

Workflow auditcaution

All three workflows were analyzed without failures and had no untrusted checkouts or script injection, but all five action references are unpinned and a high-confidence audit found adhoc package installation. One release workflow also grants top-level write access, adding moderate workflow hygiene concerns.