timiki/rpc-client-bundle

Repo bus factorcaution

One contributor made 100% of the three recent commits. The organization-owned repository provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Three commits were made in the last three months, showing recent activity, but all activity came from only one active maintainer. This limits demonstrated maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanning reduces project hygiene and transparency without making the release unfit by itself.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap for a dependency used in applications.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings or untrusted-trigger sinks, but all four action references are unpinned. That weakens build reproducibility and supply-chain hygiene.