motion-dom

Repo package mentioncaution

The repository name does not match motion-dom and its README does not mention the package, so the package-to-source relationship is less transparent than expected.

Repo toolingcaution

The project uses established build tools including TypeScript, esbuild, Rollup, and automated scripts, but no security scanning tools were detected.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.

Workflow auditcaution

The workflow audit completed cleanly with no injection or high-severity findings, and job-level permissions are used, but both analyzed action references are unpinned, weakening build reproducibility.