Risks involved with HACS?

after running HA on R-Pi3 for a couple of months, and reaching around 100 zigbee devices, i upgraded to a HA yellow for “Production”. I am doing a clean install to avoid carrying over any mess I may have created during the first phase.

I remember seeing warning about HACS during boot, that it may cause instabillities (We found a custom integration hacs which has not been tested by Home Assistant. This component might cause stability problems, be sure to disable it if you experience issues with Home Assistant.).

Should I install HACS or not? What should I be careful for to avoid stability issues? I use mushroom, apex, auto-entities… Are these a threat for stability on their own, regardless of HACS?

Since I consider the new HA installation as “Production”, I tend to be more diligent. But HACS also simplifies things.

I would really appreciate learning the downsides of HACS and/or custom cards etc.
I see in posts that the general recommendation is to disregard the warning about stability with HACS, but I am sure it isnt there for no reason!!

Thanks in advance

It is just a warning telling you that HACS is not supported by the HA development team and if they need to help with support, then it needs to removed.
The HA development team is not the forum here. The forum will pretty much help with anything related to HA, so it is a warning that can be ignored as such.
Without HACS it might be hard to integrate all your devices, because it is not everything that is available through the official repositories and probably never will be.

1 Like

That message is not specifically about HACS but any custom integration you add.

Every custom thing you add can cause stability issues, any custom thing you add can add potential security issues.

Anything custom are not checked by the HA team, and is (usually) never looked at by anyone other than the author.

My personal suggestion is: do not use anything custom unless you absolutely need to, and you trust (to some degree) the author of the custom “thing”.

1 Like

you’ll probably be fine.

The warning is because Nabu Casa doesn’t review the code and therefore cannot guarantee it.

Some HACS are more stable than others. Pay attention to whether the repo is being actively maintained or not.

These are mine and I have no issues worth mentioning:

1 Like

Oh the irony! :joy:

3 Likes

How do you know if something on HACS is secure? What red flags should I look for? For example, I’m interested in bubble cards but not sure if they’re safe to add. TIA