@react-spring/animated

Repo toolingcaution

The project uses established build and test tools, including TypeScript and Vitest, but no security-scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

No repository security policy was found. This is a transparency gap, though the active organization-backed project and npm provenance partly reduce its practical weight.

Workflow auditcaution

The audit completed all seven workflows with no high- or medium-severity findings and no untrusted checkout or script-injection paths. However, all 42 action references are unpinned, and high-confidence adhoc-package findings plus one top-level write permission create avoidable hygiene risk.