@azure/logger

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention @azure/logger, which makes package-to-source ownership less transparent; the organization-backed monorepo partly compensates.

Repo toolingcaution

The project uses TypeScript, Turbo, and npm scripts, but the collected repository tooling reports no security-scanning tools, leaving a modest transparency gap.

Workflow auditcaution

All 21 workflows were analyzed with no untrusted-checkout or script-injection findings, and 798 of 807 action references are pinned. High-confidence template-injection findings and two ad hoc package installs remain workflow hygiene concerns.