@module-federation/error-codes

Workflow auditdanger

The audit covered all 26 workflows with no untrusted checkouts or script injections, but it found high-confidence template-injection issues in the same workflow as a workflow_run trigger, plus high-confidence inherited-secrets findings. These create a meaningful automation supply-chain concern.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the package-to-repository relationship is less transparent even though both share the organization.

Security policycaution

The repository has no published security policy, leaving reporting and response expectations less transparent despite its active maintenance.