quasarstream/webrtc

Lifecycle scriptscaution

The package runs pre-install-cmd and pre-update-cmd hooks, which add execution during dependency installation and updates and therefore increase supply-chain exposure.

Repo issue activitycaution

There are only three open issues and no issue or pull-request activity in the last month. This is a mild maintenance concern, though the recent release history provides compensating evidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving less automated coverage for a package handling WebRTC security-sensitive components.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions with no high-confidence audit findings, but all three action references are unpinned, weakening build reproducibility and update integrity.