@lexical/devtools-core

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating some uncertainty about package-to-repository correspondence despite the organization-backed monorepo context.

Version stabilitycaution

Version 0.52.0 is not a prerelease, but 90% of recent releases are prereleases, so consumers should expect a less settled release process.

Workflow auditcaution

All 13 workflows were analyzed without untrusted checkouts or script injection, and 11 use read-only permissions. However, all 16 action references are unpinned, two workflows grant top-level write access, and high-confidence template-injection findings are present, making workflow hygiene a real but contained concern.