I have no comment on the maintainership issue, but I do feel I should note that according to <a href="https://packdeps.haskellers.com/reverse/cautious-file">https://packdeps.haskellers.com/reverse/cautious-file</a> there looks to be one other package that depends on it, called tbox.