talboterie/flysystem-gcp-storage

Release historydanger

This package has had only one release, published about six years ago, with no releases in the past 12 months. That is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the past three months, consistent with the long release gap and limited ongoing maintenance.

Security policycaution

The linked repository has no security policy. This is a transparency and reporting gap, though it is less significant than the lack of maintenance activity.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, leaving a modest reproducibility and supply-chain hygiene concern.