@solana/rpc-transport-http

Workflow auditdanger

The audit covered all 13 workflows and found high-confidence template-injection findings in package publishing, blanket GitHub App token permissions in two workflows, one untrusted checkout under pull_request_target, and broad top-level write permissions in seven workflows. These are meaningful workflow hygiene and release-integrity concerns, although no script injection was reported and the audit was complete.

Version stabilitycaution

Version 8.4.0 is a stable major release and is not a prerelease. The recent prerelease share is high at 90%, so consumers should expect a development-heavy release stream, but this version itself is stable.