xrplwin/xrpl-hookparser

Repo bus factorcaution

One contributor made all commits during the last three months. Organization ownership provides some handoff capacity, but no second active contributor is shown to share the current maintenance load.

Repo commit activitycaution

Only one commit was recorded in the last three months, made by one active maintainer. The recent push is positive, but the limited activity leaves less evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. For a small focused package this is a hygiene gap rather than a severe supply-chain concern.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the package's tests, license, and recent release provide some compensating project structure.

Workflow auditcaution

The sole workflow was fully analyzed with read-only permissions and no dangerous audit findings, but both of its two action references are unpinned. This leaves avoidable build-reproducibility and action-update risk.