alcedo-rml/json-rpc-server

Release historycaution

The package is only 54 days old, despite 12 releases; its short operating history limits evidence of long-term maintenance and compatibility.

Repo bus factorcaution

Two contributors are active, but one accounts for 19 of 22 commits, so maintenance is materially concentrated even with organization backing.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest supply-chain hygiene gap.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four referenced actions are unpinned, which is a supply-chain hygiene weakness.