@angular-eslint/bundled-angular-compiler

Repo package mentioncaution

The repository name does not match this package and its README does not mention it, so the package-to-repository relationship is less transparent; the organization-owned monorepo context partly offsets that concern.

Repo toolingcaution

The project uses established build tooling, including TypeScript, Nx, esbuild, Vite, and SWC, but no security scanning tool was detected; the missing scanner is a modest transparency gap.

Workflow auditcaution

All eight workflows were analyzed and use read-only permissions, with no untrusted checkouts or script-injection findings. However, all 42 action references are unpinned, and high-confidence template-injection and unsound-condition findings plus adhoc package installs weaken release-workflow hygiene.