spiral/views

Repo bus factorcaution

All 6 commits in the last 3 months came from one contributor, so maintenance knowledge is concentrated and continuity depends heavily on that person.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap, though it is partly offset by the project's other tooling and organizational backing.

Workflow auditcaution

Both workflows were fully analyzed with no injection or high-severity findings, but both use unpinned actions. The absence of top-level permissions is not a concern on its own.