vinyl-fs

Release historycaution

The project is mature, with 47 releases over nearly 13 years, but it has published no release in the past 12 months; this indicates a meaningful slowdown without proving abandonment.

Repo commit activitycaution

There were no commits from active maintainers in the past three months, a concrete sign of currently inactive development that reinforces the slow release cadence.

Repo toolingcaution

The repository uses a build tool, but no security-scanning tooling was detected; this is a modest transparency and hygiene gap rather than a severe dependency risk.

Workflow auditcaution

All seven analyzed action references are unpinned, which weakens reproducibility and makes workflow dependencies easier to change unexpectedly. The audit found no untrusted checkouts, injection sinks, dangerous triggers, or high-severity findings, and missing top-level permissions blocks are acceptable on their own.