@solana/rpc-subscriptions-spec

Repo bus factorcaution

Eight contributors were active, although the top contributor made about 62% of recent commits. The organization-owned project and several additional active contributors partly compensate for that concentration.

Workflow auditcaution

All 13 workflows were analyzed, but the audit found an untrusted checkout on a pull_request_target workflow, broad app-token permissions in two workflows, and several high-confidence template-injection findings in publishing automation. The trigger and checkout combination merits caution, while the path separation means the findings do not by themselves establish a severe release compromise.