ffmpeg-static

Lifecycle scriptscaution

An install script downloads an operating-system-specific ffmpeg binary, which is central to this package's purpose but adds install-time network and build reproducibility considerations.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating currently paused development and increasing abandonment risk.

Repo toolingcaution

The repository uses npm scripts for builds, but no security scanning tools were detected, leaving security checks less visible.

Security policycaution

No security policy is present in the linked repository, reducing transparency around vulnerability reporting and response.

Workflow auditcaution

All 46 analyzed action references are unpinned, and the audit found high-confidence uses of archived actions; the workflows have no untrusted checkout or script-injection findings, which limits the risk.