hardcastle/xrpl_php

Dependency profilecaution

Ten runtime dependencies, including network, cryptographic, and environment-loading libraries, add maintenance surface, but the profile is consistent with an XRPL client SDK.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no observed organizational backing to offset the small contributor base.

Repo bus factorcaution

Two contributors were active in the last 3 months; the leading contributor made about 61% of commits, so maintenance is somewhat concentrated but not single-person.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations and response guidance undocumented.

Workflow auditcaution

All workflows were analyzed with no audit findings, unsafe trigger sinks, or write-wide permissions, but all 3 referenced actions are unpinned, weakening build reproducibility.