spiral-packages/signed-urls

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent 1.1.0 release and December repository push provide some compensation, but current maintenance momentum is still a concern.

Security policycaution

No security policy is present in the repository. This is a transparency gap for a package that handles signed URLs, although automated dependency and static-analysis tooling partly supports its security posture.

Workflow auditcaution

Both workflows were fully analyzed with no audit findings, dangerous triggers, untrusted checkouts, or script injections. However, all eight action references are unpinned, leaving a meaningful reproducibility and action-integrity gap.