tourze/json-rpc-security-bundle

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, indicating a meaningful maintenance gap for a dependency.

Repo popularitycaution

The repository has zero stars and forks and one watcher, providing little supporting evidence of adoption or community review.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users have no documented reporting path for security issues.

Workflow auditcaution

Both workflows were analyzed with no dangerous triggers or audit findings, and one uses read-only permissions; however, all four action references are unpinned, weakening build reproducibility and update control.