pdsinterop/flysystem-nextcloud

Release historycaution

The package has only 4 releases since January 2022, with 1 release in the last 12 months and a median interval of about 508 days, indicating a slow cadence.

Repo bus factorcaution

One contributor made 13 of 14 recent commits, creating strong contributor concentration; organization backing provides some ability to hand off maintenance but does not remove the risk.

Security policycaution

No repository security policy was found, leaving disclosure guidance and security ownership less transparent.

Version stabilitycaution

Version v0.4.0 is not a stable major release, although it is not marked as a prerelease and recent prerelease share is 0%.

Workflow auditcaution

All 11 analyzed action references are unpinned, and all four workflows have top-level write permissions; the audit also found five high-confidence unpinned container images. No untrusted checkout or script-injection path was reported, so this is a hygiene and hardening concern rather than a standalone severe risk.