@next/eslint-plugin-next

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating some ambiguity about package ownership even though the package is part of an organization-backed monorepo.

Workflow auditcaution

All 29 workflows were analyzed with no untrusted checkouts or script injections, and 133 of 134 action references are pinned. However, high-confidence secrets-inherit findings and high-confidence template-injection findings indicate workflow credential and expression hygiene concerns; the low-confidence cache-poisoning findings are only secondary hygiene issues.