@orpc/standard-server

Repo bus factorcaution

The leading contributor made about 85% of recent commits; although 16 contributors are active and the repository is organization-owned, this still creates concentration risk.

Repo package mentioncaution

The repository neither matches the package name nor mentions it in the README, creating some uncertainty about package-to-repository ownership; the organization context and monorepo-style source tree partly mitigate this.

Workflow auditcaution

All five workflows were analyzed with no untrusted checkout or script-injection findings, and two use job-level or read-only permissions. However, all 17 action references are unpinned and the audit identified high-confidence trusted-publishing usage, so workflow supply-chain hygiene is a caution.