julianxhokaxhiu/cyanogenmod-ota

Registry deprecationdanger

Packagist marks the entire package as abandoned and names lineage-ota as its replacement. This is a major adoption concern even though the repository remains active.

Repo bus factorcaution

One contributor made all 12 recent commits, leaving no demonstrated backup for ongoing maintenance. The individually maintained project has a concentrated bus factor.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention this package. That mismatch makes the package-to-source relationship less transparent, despite the repository appearing related to the same OTA project.

Security policycaution

The repository has no published security policy, so users have no documented channel or process for reporting vulnerabilities. This is a transparency gap for a server package.

Workflow auditcaution

All five analyzed action references are unpinned, which weakens build reproducibility and lets referenced action code change without a reviewed version. The audit found no dangerous triggers, sinks, or high-confidence workflow findings.