@jsonjoy.com/fs-print

Repo bus factorcaution

One contributor made about 90% of the recent commits, despite two other active contributors. That concentration creates a meaningful continuity risk.

Repo package mentioncaution

The linked repository name does not match this package and its README does not mention the package. Although this could reflect a monorepo subpackage, the absence of an explicit connection weakens package-to-source transparency.

Workflow auditcaution

All three workflows were analyzed, but all five action references are unpinned; one workflow has top-level write permissions, and a high-confidence low-severity finding reports package installation outside a lockfile. These are workflow hygiene concerns rather than severe risks on their own.