@react-spring/shared

Repo toolingcaution

The repository uses established build and test tooling, but no security scanning tools were detected; the active organization and other release evidence partly compensate for that gap.

Security policycaution

No repository security policy was found, leaving vulnerability reporting guidance undocumented; this is a transparency gap rather than evidence of abandonment.

Workflow auditcaution

All 42 action references are unpinned, and high-confidence low-severity findings show packages installed outside lockfiles; there are no untrusted checkouts or script-injection findings, keeping this a hygiene concern.