bizurkur/mockfs

Release historydanger

This is the package's only release, published in July 2023, with no releases in the following three years. That long silence is substantial abandonment risk despite the repository remaining available.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the broader lack of recent releases. This materially increases maintenance risk.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it is a secondary concern compared with the maintenance evidence.

Version stabilitycaution

Version 0.2.0 is not a stable major release, so the public API may still change. It is not marked as a prerelease, which provides limited compensation.

Workflow auditcaution

All 12 analyzed action references are unpinned, reducing build reproducibility, and the audit reports a high-confidence template-injection finding. The workflow has no untrusted checkout or script-injection count, so this is a hygiene concern rather than a standalone severe risk.