@orpc/openapi-client

Repo bus factorcaution

Although 16 contributors were active, one contributor made about 89% of the 401 recent commits. Organization ownership partly reduces handoff risk, but the concentration remains a maintenance caution.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @orpc/openapi-client. This may be normal for a monorepo sub-package, but the lack of an explicit package mention reduces package-to-repository transparency.

Workflow auditcaution

All five workflows were analyzed with no untrusted checkouts or script-injection findings, and two workflows use job-level or read-only permissions. However, all 17 action references are unpinned and the audit flags trusted publishing, so workflow hygiene warrants caution despite the release's provenance.