@mux/playback-core

Maintainerscaution

Three of four publishing accounts use the organization domain, while dylanjha uses gmail.com; the organization backing compensates for this account-hygiene concern, but the external mailbox remains a minor continuity risk.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance unclear despite the presence of automated security scanning.

Version stabilitycaution

Version 0.36.0 is not a prerelease, but 75% of recent releases were prereleases and the package remains below major version 1, indicating some API maturity uncertainty.

Workflow auditcaution

All 17 action references are unpinned, and the auditor reported a low-confidence high-severity cache-poisoning pattern in cd.yml; the audit was complete and found no untrusted checkout or script injection.