@angular-eslint/eslint-plugin

Repo toolingcaution

The project uses established build tooling, though no security-scanning tools were detected; the repository's separate security policy partly offsets that hygiene gap.

Workflow auditcaution

All eight workflows were analyzed and use read-only permissions, with no untrusted checkout or script-injection findings. However, all 42 action references are unpinned, and the audit flagged trusted-publishing and other workflow hygiene issues, warranting caution rather than danger.