yocto-spinner

Repo toolingcaution

The project uses TypeScript as a build tool, supporting a structured build, but no security scanning tools were detected.

Security policycaution

No repository security policy was found. This is a transparency gap, although the package is small and other repository and workflow checks provide some compensation.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Both action references are unpinned, which is a modest reproducibility and supply-chain hygiene concern.