@firebase/firestore-types

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, creating some identity ambiguity. Because it is an organization monorepo and the package is a subpackage, this is a caution rather than a severe concern.

Workflow auditcaution

All 21 workflows were analyzed, all 106 action references are pinned, and no untrusted checkout or script-injection paths were found. The audit noted low-confidence cache-poisoning hygiene and a high-confidence low-severity ad hoc package install, warranting only a minor caution.