birpc

Repo bus factorcaution

One contributor made 5 of 6 recent commits, but the second active contributor and organization ownership provide some handoff capacity; this is a modest concentration rather than a severe dependency risk.

Repo toolingcaution

The repository uses TypeScript, Vitest, npm scripts, and Vite, but no security-scanning tool was detected, leaving a modest security-process gap.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

Both workflows were fully audited with no dangerous triggers, untrusted checkouts, script injection, or audit findings, and permissions are scoped or read-only; however, both action references are unpinned, leaving a build-reproducibility and action supply-chain hygiene gap.