idkwhoami/flux-files

Release historydanger

The package has only four releases and none in the last 12 months; its latest release was about 13 months ago. This indicates stalled maintenance for a young package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented.

Workflow auditcaution

The only workflow gives top-level write permissions and leaves all three action references unpinned. No untrusted checkout, script injection, or audit findings were detected, so this is a workflow hygiene concern rather than a severe direct risk.