quasarstream/sdp

Release historycaution

This is the package's only release, published 503 days ago, with no releases in the last 12 months. That leaves ongoing maintenance unproven and materially raises abandonment risk.

Repo issue activitycaution

There are no open issues or pull requests and no recent issue or pull request activity. This may reflect a small, quiet project, but it provides no evidence of active maintenance.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not decisive, but this provides little supporting evidence of broad community use or review.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool was detected. The missing scanner is a modest transparency gap rather than evidence that the package is unsafe.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no detected dangerous sinks or audit findings. However, all three action references are unpinned, weakening reproducibility and update control.