@nx/module-federation

Maintainerscaution

Four of five publishing accounts use the organization domain, consistent with organization backing. The outside-domain account jameshenry (henry.sc) is an account-hygiene caution, not evidence of limited maintenance capacity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @nx/module-federation. A monorepo explains the name mismatch, but the lack of an explicit package mention weakens package-to-repository transparency.

Workflow auditcaution

All 13 workflows were analyzed with no untrusted checkouts or script-injection findings, and all 81 action references are pinned. High-confidence template-injection findings and high-confidence ad hoc package installs remain workflow-hygiene concerns, while low-confidence cache findings are not independently decisive.