@solana-program/system

Repo toolingcaution

The project uses Make and TypeScript build tooling, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than an abandonment signal.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less explicit for consumers.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts or script injection, and two scope permissions at job level. However, all 11 action references are unpinned and two publishing workflows use inherited secrets with high-confidence medium-severity findings.