Repo brief: solana-labs/solana-program-library

Generated by RepoPilot · document generated 2026-09-13 · concise human review Evidence snapshot · analyzed 2026-09-13T09:10:46.929Z · commit 264ca72de06b

Verdict

Mixed — Stale — last commit 1y ago

• 12 active contributors
• Apache-2.0 licensed
• CI configured
• Tests present

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests

What it is

The Solana Program Library (SPL) is a monorepo of on-chain Solana programs and their TypeScript/Rust clients, targeting the Sealevel parallel runtime. It includes programs for token operations, governance, token lending/swapping, and account compression—key primitives deployed to Solana Mainnet Beta. Most programs have migrated to separate repos under solana-program organization, but this archive maintains reference implementations and hosts active programs like governance, token-lending, token-swap, and account-compression. Multi-program monorepo: top-level Cargo.toml workspace includes ~15 programs (governance/program, token-lending/program, token-swap/program,…

Start here

Open these first:

• Cargo.toml — Root workspace manifest defining all member packages and shared dependencies across the entire SPL repository
• account-compression/programs/account-compression/src/lib.rs — Entry point for the account compression program, the primary maintained implementation in this archived repo
• account-compression/programs/account-compression/src/state/concurrent_merkle_tree_header.… — Core state structure for concurrent merkle tree accounts, fundamental to the compression program's data model
• account-compression/sdk/src/index.ts — TypeScript SDK export point providing client-side interfaces for interacting with the compression program
• README.md — Documents the archived status of the repo and lists all migrated packages, essential context for understanding the codebase…

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/solana-labs/solana-program-library && cd solana-program-library && cargo build --workspace (builds all programs). For a specific program like token-lending: cd token-lending/program && cargo…

Daily commands:

No dev server—this is on-chain code. For local testing: solana-test-validator (runs local cluster), then cargo test --lib to run unit tests per program. Example: cd account-compression/programs/account-compression && ca…

…shortened for this brief.

Key cautions & unknowns

• Stale — last commit 1y ago
• Concentrated ownership — top contributor handles 63% of recent commits
• curve25519-dalek slow SIMD backend: dev/test builds force opt-level=3 in Cargo.toml to avoid 400ms+ slowdown in solana-test-validator ZK proof verification. Program-specific CI: each program has its own workflow…
• Published-advisory coverage was unavailable for the captured dependencies.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.