xrplwin/xrpl

Repo bus factorcaution

One contributor made all recent commits, leaving maintenance highly concentrated; organization ownership provides some handoff capacity but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating limited recent development activity despite the strong registry release cadence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear for a network-facing API client.

Workflow auditcaution

The workflow uses read-only permissions and has no detected audit findings, but both of its action references are unpinned, reducing build reproducibility and increasing dependency drift risk.