@jsonjoy.com/fs-snapshot

Repo bus factorcaution

Three contributors were active, but one contributor made about 90% of the last three months' commits. That concentration leaves maintenance dependent on one person.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention the package, so the package-to-repository relationship is not clearly established. This is a transparency concern even though subpackages can legitimately live in monorepos.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected. This is a modest repository hygiene gap rather than evidence of abandonment.

Workflow auditcaution

All three workflows were analyzed without untrusted triggers or script injection, but all five action references are unpinned and a high-confidence low-severity finding reports installing a package outside a lockfile. One release workflow also grants top-level write access.