@orpc/standard-server-peer

Repo bus factorcaution

One contributor made about 85% of recent commits, creating a real concentration risk; however, 15 other contributors were active and the repository is organization-owned.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, so the link is less transparent; the package may be a monorepo subpackage, but that is not demonstrated by this signal.

Workflow auditcaution

All five workflows were analyzed with no untrusted checkouts or script injection, and two scope permissions at job level; however, all 17 action references are unpinned and the audit flagged trusted publishing, creating a workflow-hygiene caution.