mops1k/json-rpc-bundle

Release historydanger

The package has six releases, but its latest release was on July 27, 2024, and it has had no releases in the past 12 months despite being over two years old. This materially raises abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing little evidence of ongoing maintenance.

Repo popularitycaution

The repository has only 1 star, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these numbers provide little external adoption or review evidence.

Security policycaution

No security policy is present, leaving no documented process for reporting vulnerabilities or communicating security fixes. This is a modest transparency gap for a server bundle.

Workflow auditcaution

The single workflow was fully analyzed and has no untrusted checkout or script-injection findings, but all 10 action references are unpinned. The reported cache-poisoning findings are low-confidence hygiene concerns, not decisive risks on their own.