quasarstream/av
The package includes tests, release notes, a security policy, and clear repository ownership. Its license files disagree with the manifest, while the repository has no recent commits and its workflow dependencies are unpinned.
58%
Total Score
75
100
79
83
Health Score Breakdown
The artifact includes a license file and the repository also has one, so licensing is documented; however, the manifest declares MIT while the detected file text is BSD-3-Clause, creating a material mismatch.
Only one release exists, published about 17 months ago, with no releases in the last 12 months. This leaves limited evidence of sustained maintenance.
There were no commits and no active maintainers in the last three months. Combined with the single-release history, this is evidence of weak recent maintenance.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.
The only workflow was fully analyzed, uses read-only permissions, and has no untrusted checkouts or injection findings. However, all three action references are unpinned, so their revisions can change unexpectedly.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Amin Yazdanpanah |
| Sana Moniri |
| Quasar Stream Community |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 quasarstream/mixin Version ^1.0 | — | — |
quasarstream/exception Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.