write-file-atomic

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer. This is thin recent activity, although other signals show the project is still releasing.

Workflow auditcaution

All eight workflows were analyzed, but all 38 action references are unpinned and four workflows grant top-level write permissions. High-confidence template-injection findings and a medium-confidence bot-condition finding add workflow hygiene risk, though no untrusted checkout or script-injection sink was found.