quasarstream/opus

Lifecycle scriptscaution

The package defines pre-install-cmd and pre-update-cmd scripts. Install-time hooks increase dependency and upgrade complexity, even though this signal alone does not show unsafe behavior.

Release historycaution

This package has had only one release, published 494 days ago, with no releases in the last 12 months. That leaves maintenance and compatibility follow-through uncertain despite the repository remaining available.

Repo popularitycaution

The repository has 1 star, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these very low figures provide little external evidence of maturity or community support.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tool was detected. The missing scanner is a modest transparency gap, partly offset by the repository's security policy.

Workflow auditcaution

The workflow audit completed fully and found no dangerous triggers, untrusted checkouts, script injection, or high-confidence audit findings; it also reports read-only permissions. All 3 action references are unpinned, which is a build-hygiene caution.