soap

Build provenancecaution

No registry build attestation or trusted-publisher metadata is present. This limits publication transparency, but active release and repository evidence provide compensating maintenance context.

Dependency profilecaution

The package has 8 runtime dependencies, a moderate dependency surface for a SOAP client. This is not excessive, though each runtime dependency adds some maintenance exposure.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, both of its 2 action references are unpinned, leaving a modest reproducibility and action-substitution gap.