@types/fs-extra

Release historycaution

The package has a long history with 76 releases, but it has had no release in nearly three years; this is a maintenance-cadence concern, although the backed repository remains active.

Token permissionscaution

Five workflows declare read-only permissions and none declare top-level write permissions; two omit top-level permissions, leaving a minor configuration gap but no severe exposure shown.