@openfeature/server-sdk

Repo package mentioncaution

The repository name does not match the package and its README does not mention this exact package, creating some uncertainty about package-to-repository mapping; the organization ownership and monorepo-like tree partly mitigate it.

Workflow auditcaution

All six workflows were analyzed with no untrusted checkout or script-injection findings. However, two high-confidence adhoc-package findings and one workflow with top-level write permissions are minor hygiene concerns; the low-confidence cache finding is not independently decisive.