@whiskeysockets/baileys

Dangerous workflowscaution

One of ten workflows uses pull_request_target, which requires careful handling of untrusted pull-request input, but no untrusted checkouts or script-injection patterns were detected.

Dependency profilecaution

Eleven runtime dependencies create meaningful transitive maintenance and supply-chain surface for a communications library, but the dependency count is not excessive for its functionality.

Lifecycle scriptscaution

The package uses preinstall, prepack, and prepare scripts, which increase installation and build complexity and deserve review before adoption, though this signal alone does not show harmful behavior.

Repo issue activitycaution

Issues and pull requests remain active, with 15 new issues, 20 closed issues, and 22 new pull requests in the last month. The absence of merged pull requests in that period is a modest workflow concern.

Repo toolingcaution

The repository uses TypeScript, npm scripts, and esbuild, but no security-scanning tools were detected, leaving a security-process gap.