spiral/storage

Repo bus factorcaution

Only one contributor made all 8 commits in the last 3 months, giving the repository a 100% top-contributor share. Organization backing helps provide handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no published security policy. That is a transparency gap for reporting and handling vulnerabilities, although it is not evidence of abandonment by itself.

Workflow auditcaution

Both workflows were analyzed cleanly with no injection, untrusted-checkout, or audit findings, and neither grants top-level write access. Both action references are unpinned, leaving a reproducibility and action-supply-chain hygiene gap.