@qwen-code/qwen-code

Dependency profilecaution

Sixteen runtime dependencies, including platform-specific native packages and sharp, make the package operationally substantial and increase upgrade and platform compatibility surface.

Version stabilitycaution

Version 0.25.1 is not a prerelease, but 75% of recent releases were prereleases, indicating a fast-moving project and some API stability risk.

Workflow auditcaution

The audit found 40 unpinned action references out of 170, high-confidence template-injection findings, and high-confidence ad hoc package installs; low-confidence cache and environment findings remain hygiene concerns. Only 30 of 62 workflows were analyzed, so this is a meaningful transparency and CI supply-chain gap, though no untrusted checkouts or script injections were found.