@react-spring/web

Repo issue activitycaution

Recent issue and pull-request closure activity is limited, with no newly closed issues and no merged pull requests in the last month, creating a modest maintenance concern despite recent commits and releases.

Repo toolingcaution

The project uses established build and test tooling, but no security scanning tools were detected, leaving a minor transparency gap.

Security policycaution

The repository has no security policy, making vulnerability-reporting expectations less clear for dependents.

Workflow auditcaution

All seven workflows were analyzed with no high- or medium-severity findings, and there are no untrusted checkouts or script injections. However, all 42 action references are unpinned and high-confidence adhoc package-install findings appear in release and test workflows, creating build-hygiene concerns.