tinect/flysystem-garbage

Release historycaution

Only two releases have been published, with no releases in the last 12 months and a median interval of about 389 days. This suggests a slow maintenance cadence, though the package is not necessarily abandoned.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a meaningful maintenance warning, although the recent repository push shows the project has not been abandoned outright.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. For this small package that is a hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. This weakens disclosure transparency but does not by itself indicate that the release is unsafe to depend on.

Workflow auditcaution

The sole workflow uses a pull_request_target trigger without an untrusted checkout or script-injection sink, so that trigger is not concerning on its own. However, all three action references are unpinned, reducing build reproducibility and supply-chain hygiene.