@secretlint/resolver

Repo package mentioncaution

The repository name differs from the package name and its README does not mention this package. That may be normal for a monorepo subpackage, but it leaves package-to-repository ownership less transparent.

Workflow auditcaution

All eight workflows were analyzed with no untrusted checkouts, script injection, or unpinned action references. One high-confidence medium-severity finding identifies an archived action, while some workflows use broad top-level write permissions.